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News Track 


MixeD INDICATORS 
The National Science Board says leading science and 


| Duke experiment that robotics experts world- 
wide called an exciting and important advance- 


engineering indicators tell a mixed story regarding U.S.) ment in brain-machine interfacing. “It’s one 


achievements in science, 
R&D, and math in interna- 
tional comparisons. As 
reported in NetWorkWorld, 
U.S. schools continue to lag 
behind their internationally 
counterparts in science and 
math education. On the flip 
side, the U.S. leads in patent 
development and is the 
largest R&¢D-performing 
country in the world, invest- 
ing $340 billion in future- 
related technologies. While 
the report is massive, the 
NSB came up with 13 prime 
observations, or what it calls the leading Science and 
Engineering Indicators 2008 


(www.nsf.gov/news/news_summ.jsp2cntn_id=110984). 


Along with the educational signals, the report also 
notes U.S. firms increased the number of people 
employed in R&D jobs outside the U.S. by 76% and 
employment within the U.S. by 31%, while U.S. sub- 
sidiaries of foreign firms increased their U.S. R&D 
employment by 18%. Moreover, the U.S. remains the 
leading producer in high-tech manufacturing and 
knowledge-intensive services, but several Asian coun- 
tries, led by China, are rapidly increasing their global 
share. 


ROBOT-PROPELLING THOUGHTS 
The robotics world registered a significant advance- 
ment in brain-machine interface technology last Janu- 
ary when a 12-lb monkey climbed onto a treadmill at 
Duke University and began walking at a steady pace, 
prompting a 200-lb humanoid robot on a treadmill in 
Kyoto, Japan to do the same. It was the first successful 
attempt at using brain signals to make a robot walk, 
thus producing bountiful implications, reports the 


New York Times. Miguel A.L. Nicolelis headed up the 


small step for a robot 
and one giant leap 
for a primate,” said 
Nicolelis after the 
test. The monkey, 
trained to walk on 
two legs, had elec- 
trodes implanted in 
her brain to record 
the activity of the 
250-300 neurons 
that fired as she 
walked. These signals 
were fed into the 
computer and trans- 
= ~ mitted via the Net to 
| CB, the Some dealt Brain robot at the ATR 
| Computational Neuroscience Laboratories in 
Japan, chosen for its extraordinary ability to 
mimic human locomotion. These experiments 
| represent the first step toward brain-machine 
interfacing that may someday may permit para- 
lyzed people to walk by directing devices with 
their thoughts. 


GLOBAL DATABASE 
The FBI is coordinating 
global allies in the “war 
against terror” to build an 
international database to 
hunt major criminals and 
terrorists. The “Server in the Sky” program 
would require cooperation among police forces 
in Australia, Canada, New Zealand, U.S, and the 
U.K. to share more than the current practice of 
| sending fingerprint faxes across the Atlantic. The 
Guardian reports the working group, called the 
International Information Consortium, will 
strategize on how to best share biometric mea- 
' surements, irises or palm prints, as well as finger- 
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prints and other personal information likely to be | 
exchanged through the network. The FBI proposes 
three categories of suspects for the shared system: 
internationally recognized terrorists and felons; 
major felons and suspected terrorists; and subjects 
of terrorist investigations or criminals with interna- 
tional links. An FBI spokesperson says the agency 
hopes to see a pilot project up and running by 
mid-year. 


KNOW THE ENEMY, AND YOURSELF 
In other defense news, a Pentagon chief acquisition 
official has asked the U.S. Defense Science Board 
to organize a “Task Force on Understanding Adver- 
saries.” The board, an advisory 
group to the Office of the Sec- 
retary of Defense, was estab- 
lished 50 years ago and is 
known for its respected reports 
on science and technology 
issues. The task force will be 
responsible for increasing the 
understanding “of adversaries, 
their operating environment, 
and the relevant host popula- 
tion—to devise effective terror- 
ist and insurgent 
countermeasures, and support 
strategic communications.” The Pentagon memo 
prompted a Wired.com blog that wondered how 
science and technology experts would approach 
issues outside their primary field, in this case, the 
social sciences. While Board chairs have been 
thinking of recruiting social scientists to join what 
is typically a hard-science-heavy organization, 
observers wonder if these diverse groups can come 
to any meaningful recommendations, recalling an 
ill-fated attempt to recruit social scientists during 
the Vietnam War era. Said one blogger: “If the 
Pentagon is really serious about gaining expertise in 
the social sciences, why not have a Defense Social 
Science Board?” 


Bopy ELEectTrRIC 
Scientists from the Lawrence Berkeley National 
Laboratory believe they have discovered a much 
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more efficient way to use silicon to convert body 
heat into electricity for use in a variety of products 
ranging from cars to portable electronics. Accord- 
ing to 7G Daily, the concept of converting waste 
heat into electricity isn’t new but never really mate- 
rialized due to efficiency obstacles. Now, 
researchers using what they describe as “rough” sili- 
con nanowires created in a process of “electroless 
etching” may increase the conversion efficiency by 
a factor of 100. While the research is far from com- 
plete, the scientists believe potential applications 
include the Department of Engery’s hydrogen fuel 
cell-powered Freedom Car and personal power 
jackets that could use heat from the human body 
to recharge cell phones, 
iPods, and other elec- 
tronic devices. 


OrsiTAL GAMES, 
VIRTUALLY 

NASA is exploring the 
possibility of developing 
a massively multiplayer 
online (MMO) game 
for students that would 
simulate real NASA 
engineering and scien- 
tific missions. NASA 
| believes the game would help find and inspire the 
next generation of scientists and engineers needed 
to fulfill its vision of space exploration, reports 
BBC News. The agency recently issued an RFI 
from organizations interested in developing the 
platform. The document calls for a game engine 
_ with powerful physics capabilities that would sup- 
port accurate in-game experimentation and 
research, saying “A NASA-based MMO could pro- 
vide opportunities for students to investigate sci- 
ence, technology, engineering, and mathematics 
career paths while participating in engaging game 
play.” For more, see http://procurement.nasa.gov/ 
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The Inaccurate Conception 


Some thoughts on the accuracy of estimates. 


‘estimate \'es-ta-,mat\ vt [L aestima- 
tus, pp. of aestimare to value, estimate] 
1 archaic as ESTEEM b: APPRAISE 
2 a: to judge tentatively or approxi- 
mately the value, worth, or significance 
of b: to determine roughly the size, 
extent, or nature of ce: to produce a 
statement of the approximate cost of 


Merriam- Websters Dictionary 


e pursuit of an 
“accurate estimate” 
| for a system devel- 


opment project is an 
article of faith among 
project planners and 
managers. Methods, 
tools, approaches, and 
formulae to devise the 
accurate estimate are the 
subject of articles, conference 
presentations, and books. The 
fact that the juxtaposition of the 
words “accurate” and “estimate” 
produces an oxymoron does not 
seem to deter people from the 
quest for what is clearly a contra- 
diction in terms. 

Are we looking for the wrong 
estimation criterion? 


WHETHER FORECAST? 
When a weather forecast indicates 
a 40% chance of rain and it rains 


on you, was the forecast accurate? 

If it doesn’t rain on you, was the 

forecast inaccurate? Thought of in 

these terms, the concept of accu- 

racy takes on a different meaning. 
It seems that the 


—S 
SSS 


™ 
~~ 
~ = 


<s 


fact it does or does not rain on you 
is not a particularly good measure 
of the accuracy of the rain estimate. 


THE CONE OF UNCERTAINTY 

In his excellent book, Software Esti- 
mation: Demystifying the Black Art 
[3], Steve McConnell disinterred 
the “Cone of Uncertainty” origi- 
nally shown years ago by Barry 
Boehm [2]. 
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The Cone of Uncertainty 
describes the typical range of 
attainable accuracy of a software 
project estimate at different times 
in the project life cycle. Figure 1 
shows that in the early stages of the 
project, the range might be from 
four times the final actual result to 
one quarter of the actual. Not very 
accurate, is it? Both authors assert 
this is about the best you can 
expect to do at that point in time, 
though the actual range is highly 

situational. That is, we could do 
worse than 4X—0.25X, but we 
cant realistically expect to do 
much better. But why is this true? 

Certainty comes from knowl- 
edge of something. To use a 
mathematical analogy, we have 
knowledge and therefore certainty 
when we are aware of the presence 
of a variable; we also know its 
value. On the other hand, uncer- 
tainty comes from things we don’t 
know. There are two types of 
things we don't know: we are aware 
of the presence of a variable but 
dont know its value or are unaware 
of the presence of a variable (and of 
course don’t know its value, too). 
The presence of knowledge is Zero 
Order Ignorance (0OJ), and the 
two types of uncertainty are First 
and Second Order Ignorance 
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(1OI and 2OJ) [1]. Except 
under very special circum- 
stances, when we begin a 
project there are many 
things we don't know. Some 
of these things we are aware 


. HoLD To 10% 

I recently spoke to a 
senior executive at a soft- 
- ware consultancy. He was 
_ emphatic that when his 
project managers create 


of (1OJ) and some we are an estimate, he will hold 
not (2O)). It is this lack of _ them to within 10% of 
knowledge, particularly the the value they come up 


with. The Cone of 
Uncertainty would seem 
to fundamentally contra- 
dict the feasibility of that 
approach. The reason 
why an estimate cannot 


20] variety, that generates 
the uncertainty. Since soft- 
ware development is pri- 
marily a knowledge- 
acquisition activity, we 
spend most of our time dis- 


Figure 1. The Cone of Uncertaint 
covering this knowledge. een (edayited Heniishe usually beat the Cone is 


Simply put: over time our that information about 


the project is imprecise at 
that point in time; the 

_ data is unavailable, unpre- 
-dictable, inexact, or just 
plain wrong. No mathe- 
matical equation can have 
an output more precise 
than its input. In fact, 

_ this executive's hard- 
nosed approach to esti- 


knowledge grows and our 
ignorance diminishes. 

The ranges mapped out 
by the Cone of Uncertainty 
describe a probability func- 
tion with respect to time (or 
budget, staffing, or other 
project attributes—see Fig- 
ure 2). In early phases of the 
life cycle, the width of the 
Cone of Uncertainty at that mation will likely 
point in time generates a z generate defensive behav- 
rather flat probability distri- Fo 3a |e temcnentensinssananiyenncctsinnng fo ior on the part of his 
bution (see Figure 3). This project managers and esti- 
means there is a wide range ~ mators. Specifically, it 
of answers that might gener- — may encourage them to 
ate a solution. If the func- try to overstate the prob- 
tion is extremely flat, the lem, to “pad” the estimate 
model will infer the project in the hope of getting 
should take somewhere more resources. More 


between a few weeks and a i arent eal 90% probability of Ha resources of time, budget, 
few decades. Since every a ele and staff always means 
project takes somewhere me) 50% probability of eee the project has a higher 
between a few weeks and a > [usualy atthe midpoint] hrobability of achieving 
few decades this estimate its goals within those 
might be accurate but is not Figure 2. Probability distribution resources. Management, 


: : : (adapted from Armour, P.G. Ten unmyths of : : 
useful in making a business project ectimiatinn. Corin. ACM 45,1 however, is often allergic 


decision. (Nov. 2002)). to estimate padding and 
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seeks to remove it. Removing the 
additional resources naturally has 
the effect of making the project 


riskier. 


MANAGEABLE RISK? 
The probability of success and its 
associated risk is a function of 
what is known and what is not 
known. Some risk may be man- 
ageable with a little effort, and we 
can usually attenuate risk if we are 
willing to expend a lot of effort. 
But some risk may not be man- 
ageable or predictable at all. The 
Cone of Uncertainty simply maps 
onto the knowledge/unknowledge 
content of the project over time. 
It is interesting to note that the 
executive mentioned here does not 
really want an accurate estimate; 
what he wants is to have some 
assurance the project will be deliv- 
ered within some constraint of 
budget, time, and staff. It might 
seem this is the same thing as an 
accurate estimate, but it’s not. Per- 
haps this is where we should look 
for “accuracy”? 


THE ACCURATE COMMITMENT 

I recently completed an estimate 
of a large project for a client. It 
directly supported the estimate 
done by the project’s program 
management office, but I calcu- 
lated the probability of achieving 
the stated budget at 65%, which 
was just about where it should be. 
Since this probability was higher 
than expected, the project man- 
ager asked “Can I quote a lower 
price then?” The answer is, of 
course, yes—but at a higher level 
of risk. In fact, he could quote the 


price a lot lower, if he was also 
willing to take a very high risk of 
not actually achieving it. This is 
where accuracy is really measured. 

We don’t need an accurate 
estimate; we need an accurate 
commitment. 

The commitment is the point 
along the estimate probability dis- 
tribution curve where we promise 
the customer and assign 
resources. This is what we need 
to hit, at least most of the time. It 
is not a technical estimation 
activity at all but is a risk/return- 
based business activity. It is 
founded on the information 
obtained from the estimate, but is 
not the estimate. Using Figure 3 
as an example, if we needed an 
accurate commitment in the earli- 
est (Initial Concept) phase based 
on how the diagram shows the 
project actually worked out, we 
would have had to commit at 
around a 75% probability. From 
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Figure 3. Probability over time. 


the figure, committing to the 
“expected” result at Initial Concept 
would have led to a significant 
overrun beyond that commitment, 
and the project would have 
“failed.” We can consider the 50% 
(expected) result to represent the 
cost of the project and the 25% 
increment to the higher commit- 
ment level to represent the cost of 
the risk of the project. 

The accuracy of a weather fore- 
cast is not whether it rains or not 
but whether it rains at the likeli- 
hood it was forecast to rain. Simi- 
larly, the accuracy of an estimate 
on a project is not whether the 
project achieves its goals but 
whether it correctly forecasts the 
probability of achieving its goals. 
In fact, I saw this recently, where a 
project had been committed at an 
estimated 20% of success. While 
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the project failed we could (and 
did) reasonably argue that the esti- 
mate was, in fact, accurate since it 
correctly forecast the failure; para- 
doxically, if the project had been 
successful we could consider the 
estimate to have been wrong. 

The problem wasn’ the esti- 
mate but the commitment. If we 
commit to a low probability of 
success on a project we are gam- 
bling with our budget, staff, and 
customer relations and that is 
often not a good thing. 


REIN IN THE COMMITMENT 

If there is a 40% chance of rain 
and I decide to walk outside in 
my expensive suit without an 
umbrella and it rains on me and 
ruins my suit, it is not the fault of 
the forecast; it is the fault of my 
decision. 

If we calculate the level of risk 
we are taking on a software project 
and choose to roll the dice with 
the odds stacked against us, it’s 
not the fault of the dice. It is nei- 
ther fair nor, well, accurate to 
blame a good estimate for a bad 
commitment. 
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Managing for Innovation 


People versus process? Watts Humphrey says it’s people and process. 


atts Humphrey is best 
known for his work on 
software process at the 


Software Engineering Institute. 
His first book, Managing the 
Software Process [2], 
and his subsequent 
writings on that sub- 
ject, are likely 
among the most 
significant 
works in the 


field of soft- 
ing, and that 


has been at the 
heart of most 
important 
discussions of 
software engi- 
neering topics for 
at least two decades. 
Two years before his first 
process book, Humphrey wrote 
another book, Managing for 
Innovation [1]. This earlier book 
attracted almost no attention 
over the years, and yet in many 
ways it may be just as important 
as the better-known one. It was 
republished in 1997, as Manag- 
ing Technical People {3| and—to 
the best of my knowledge—that 
version 2.0 book remains as lit- 
tle-noticed as the earlier one. 


The subtitle of the innovation 
book is “Leading Technical People” 
(it is interesting that this subtitle 
graduated to the title of the version 
2.0 Managing Technical People), 
and the idea behind both books 
is that people matter a lot in 
building software products. 
The books are about innoy- 
ative technical software 
people and the role of 
managerial leadership 
4 in enabling that innova- 
J tion. That makes the 
books a fascinating j juxta- 

position with 
_ Humphrey’s later 
isi, process 
: work, since 

in that later 
work he has taken 
the position that 
process (not people) is the 
key to software success. 

But back to the earlier 
Humphrey book and its succes- 
sor version 2.0. What is the rela- 
tionship between innovation and 
creativity? Humphrey—quoting 
Theodore Levitt—puts it very 
succinctly: “Creativity is think- 
ing up new things. Innovation is 
doing new things.” 

Humphrey goes on to add, 
“While innovation requires cre- 
ativity, it also involves a great 
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deal of hard work.” 

The book is about both creativ- 
ity and innovation, although 
Humphrey is clearly more inter- 
ested in the latter, because it is in 
the “doing”—the so-called “hard 
work”—that management's role 
comes to the fore. 

What does Humphrey have to 
say about the intricate relationship 
between management and the cre- 
ative technical person? 

Regarding control, he reports 
findings from the literature that 
“managers who tightly control the 
way their people work generally 
get significantly less creativity than 
those with a looser and more 
informal style.” 

Regarding management techni- 
cal knowledge, he reports other 
findings that “when the manager's 
ability was limited, innovation was 
highest when the group was given 
the greatest freedom.” 

“When the manager was highly 
skilled in administration, person- 
nel, and technology,” Humphrey 
went on, “the results were mixed; 
sometimes freedom helped, but 
sometimes it did not.” Humphrey 
concludes with an old saying: “If 
you don't know what you're 
doing, then stay out of the way!” 

Looking at the matter from a 
different point of view, Humphrey 


March 2008/Vol. 51, No. 3 17 


Practical Programmer | 


examines studies of successful and 
unsuccessful groups. “In the most 
innovative, the managers person- 
ally involved themselves in the 
work and maintained close techni- 
cal contact with their people. For 
the least innovative, the managers 
were less active and more remote.” 

Is there a lesson to be drawn 
from this material? Perhaps it is 
“the most innovation comes when 
(a) the manager has technical skills 
and involves himself or herself in 
the group’s work, while (b) maxi- 
mizing the amount of freedom 
given his technical people.” 

Is technical creativity the most 
important factor in successful 
innovation? According to 
Humphrey and the studies he 
cites, the answer is no. In fact, the 
“persistent tendency of technical 
people to confine themselves to 
the laboratory and not to seek a 
detailed understanding of the 
user's needs” is one of the foremost 
reasons for research and develop- 
ment failure, he says. 

What is the alternative to the 
laboratory-confined technologist? 
“Successful product development 
depends more on market astute- 
ness than on technical compe- 
tence,” he says, quoting a 
University of Pennsylvania study. 
The most innovation, in fact 
(according to another study), 
comes “when the users were tech- 
nically competent.” That is, users, 
understanding the application 
problem to be solved, are more 
likely to produce innovation than 
computer technologists, who 
understand only the computing 


problem to be solved. Humphrey 


goes on to cite another study that 
found “75% of all innovations ... 
came from market sources, but the 
highest percentage of technically 
driven innovations given by any 
single study was only 34%.” That 
is, customer need, rather than 
technological progress, determines 
whether an innovation is likely to 
be successful or not. (Sounds 
familiar, doesn’t it? It’s a new varia- 
tion on the old theme, “necessity 
is the mother of invention.”) 

An interesting aside in the book 
deals with the issue of how age 
affects creativity. Although there is 
a common belief that creativity 
and innovation peak at a fairly 
early age (it has been cited as 
being anywhere from 21 to 29), 
Humphrey says there is an increas- 
ing body of evidence that points 
the other way. In one study, the 
researchers found that perfor- 
mance peaked at an early age but 
declined very slightly thereafter. 
The precise point at which this 
peak occurred depended on the 
technical field; it was earlier in the 
more abstract fields of mathemat- 
ics and theoretical physics and 
later in such pragmatic specialties 
as biology and geology. The initial 
peak fell in the mid-30s, but a 
later peak was also found in the 
mid- to late-50s. This double-peak 
phenomenon occurred in all the 
groups of engineers and scientists 
studied, and the dip between these 
two peaks was not very significant. 

Humphrey summarizes with an 
encouraging thought (at least for 
older readers): “For creative peo- 
ple, the late 30s and early 40s is a 
highly stressful period. Once they 
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pass this hurdle, however, many 
engineers and scientists will con- 
tinue their creative work for many 
years... many of Thomas Edison's 
1,100 inventions were produced 
late in his 84-year life.” 

From the point of view of man- 
aging for innovation, then, good 
leaders must know that any of 
their people, of any age, may con- 
tribute creativity and innovation. 

These Humphrey books on the 
importance of people in the software 
process should be considered of 
equal significance with Humphrey's 
better-known process work. Both 
practitioners and academics will be 
enriched by reading either of these 
people-focused books—practitioners 
will see the books as an acknowledg- 
ment of their contribution to soft- 
ware process success, and academics 
will come to a better understanding 
of what constitutes successful 
practice. 
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Data Type’ 


Just Say ‘A Class Defines a 


When teaching computer programming to novices, forget “objects early,” 


| “objects later,’ and “back to basics.” 


sk a group of graduating 
A=: majoring in com- 
puter science to define a 
ma data type and chances are most 
Y of them would be unable to 
answer even loosely beyond 
» simply providing examples. 
Then add the concepts of 
abstract data type and (Java) class, asking about the 
relationship between them. The same students 


| would also be unlikely to find an answer in a CS1 


textbook. Some textbooks might not even contain 


terms like data type, abstract data type, or type. Yet 


_ the study of data types is fundamentally important 


to learning programming with a typed program- 
ming language. Moreover, if novices do not learn 
data types the right way—consistent across differ- 
ent data types and programming paradigms—some 
would face insurmountable difficulty learning 
object-oriented programming, no matter when 
they learn it. Without a proper characterization of 
data type, the textbook, as well as the instructor, 
would be fundamentally challenged to present 
everything else effectively or even correctly, no 
matter which approach they took. 

When associating the concept of data type and a 
computing language, a correct definition should be 
consistent with the following: A data type character- 
izes how a set of entities is internally represented and 
algorithmically manipulated. Learning computer 
programming progresses with the level of maturity 
commensurate with the learner's sophistication in 
understanding and using data types. 

Novices typically have much more difficulty 
learning about abstract data types, or ADTs, than 


about other data types. A reason for this is the lack 
of adequate coverage early on about data types, their 
structures, and the roles they play in problem solv- 
ing, thus making the learning of ADTs a discon- 
nected experience. For example, when learning 
built-in primitive data types, novices might naively 
take operations (such as +) for granted. Later, they 
may encounter the same + applied to strings. How- 
ever, they normally miss the implication of what 
they see in both cases—the same apparent operation 
defined and implemented differently in the respec- 
tive data types, depending on how the underlying 
data is represented. 

A class (as in an object-oriented programming 
language like Java) defines a data type. Yet this fact is 
typically not mentioned in CS1 textbooks. Lacking 
an accurate description of a data type, the best a 
textbook (or an instructor) can do is say something 
like: A class is a template, blueprint, or pattern of an 
object. These characterizations suggest how a class 
can be viewed, not what a class is, much less what a 
class can do, thus making it difficult to learn the 
true nature of a user-defined data type. 

Having learned primitive data types and stand- 
alone methods when covering ADTs, novices typi- 
cally experience a drastic change in the level of 
abstraction (an ADT is essentially a mathematical 
algebra) they were unprepared for while learning 
primitive data types. Unfortunately, this discon- 
nected learning experience is interpreted as “getting 
a mindset in procedures” by some educators. It was 
in this context that the notion of “teaching objects- 
first” was born about a decade ago and is still a rea- 
sonably popular teaching strategy for a course for 
beginning programmers, despite the ongoing con- 
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troversy. To help with “teaching objects first,” educa- 
tors, notably the creators of the 3D storytelling pro- 
gramming software Alice and integrated 
programming environment Blue], have developed 
software for visualizing objects and teaching materi- 
als using visual objects (such as robots, graphics, and 
role-playing games). Do they work? The answer 
depends on who you ask. Educators must still 
address how novices transform their ability to 
manipulate visual objects into programming skills. 
However, the educational shortcomings attributed to 
poor understanding of ADTs may be rooted more 
deeply than not understanding what objects are and 
how they behave. 
| Textbooks have been written to support the 
objects-first or objects-early approach, though few of 
them reflect problem solving at its core. Here, I 
define some of the more apparent problems I have 
observed in recent Java texts (none cited in the refer- 
ences here): 

Effective teaching methods. Novices learn about 
_ object instantiation and behavioral method calls 
from the start; they may even learn software engi- 
neering principles in chapter 1, an approach analo- 
gous to teaching babies to speak sentences when they 
are barely able to speak a word. 

Class design. When trying to identify classes, 
“noun extraction” seems to be a straightforward 
process, as covered in some textbooks. However, 
abstract nouns can end up as the basis for defining 
data types, while a primitive data type may be all 
that’s needed for what is otherwise a user-defined 
data type. Architectural data types are rarely implied 
by the nouns of a requirement description, and verbs 
may wind up defining operations of some unex- 
pected data types. That is why identifying classes 
_ generally requires program analysis, a process that's 
still far from straightforward. 

Consistent view. Primitive data types are value 
types, and user-defined types are reference types. So 
| why can't educators give their students a consistent 
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view of a data type regardless of whether it’s primi- 
tive or user-defined? A primitive data type encapsu- 
lates data in binary format, represents data in an 
internal format (say, the two's complement, or the 
way a computer represents integers internally using 
1s and Qs), and defines operations we often take for 
granted. Few programmers would care how + is 
implemented should integers not be represented by 
the two's complement. Thus, the level of abstraction, 
in which + is invoked, separates the relevant detail of 
“what” from the irrelevant detail of “how”—the 
essence of ADTs. (OO programming languages also 
address the “mechanical” differences through auto- 
wrapping and unwrapping features.) 

Toy objects. Objects with “toy” behavior are often 
included in textbooks yet solve no practical problems. 
Assigning appropriate methods to an object is among 
the most difficult lessons a novice can learn. A pro- 
gram design often dictates whether an object should 
or should not have certain behaviors due to architec- 
tural, maintenance, or efficiency concerns. For exam- 
ple, the statements 
student .isScholarshipEligible() and 
financialAidot - 
fice.isScholarshipEligible(student) may 
be interchangeable in an application, depending on 
the design; the question for educators is not whether 
novices should reach such a level of sophistication, 
but how they might get there. Toy object after toy 
object will almost never provide a viable path to this 
level. 

Programming paradigms. “Objects early” means 
“object-orientation monopoly” in many textbooks. 
Studies of the practice of software engineering show 
that object orientation is not a dominant paradigm 
in real-world software development [1], so why 
should educators act like it is when teaching novices 
programming? In fact, viewing software as a service, 
developers have found a new role for procedural data 
abstraction in data-intensive and highly distributed 
business applications. Data handling is mostly proce- 


dural in nature; for example, the object-data source 
control of the ASP.net framework works directly 
with standalone methods. How can educators 
introduce object orientation to novices so it is sim- 
ply a means for problem solving, not a hammer 
looking for a nail. 

A debate “Resolved: Objects Early Has Failed” at 
the 2005 Symposium of the ACM Special Interest 
Group on Computer Science Education drew a siz- 
able crowd, and in 2007 a back-to-basics textbook 
[2] was published. Interestingly, this sequence of 
“structured programming, teaching objects early, 
then back to basics” reminds me of the “drills, 
reformed calculus with technology, back to funda- 
mentals” cycle the mathematics teaching commu- 
nity has experienced since the late 1980s. The 
critics still believe that the movement to reform the 
teaching of calculus fails to educate students, con- 
sidering the courses watered down. Students, they 
say, come out of introductory calculus courses with 
no idea how to solve complicated mathematical 
problems [4]. One can argue (many CS educators 
indeed do) that teaching “objects first” has compro- 
mised teaching algorithm skills. Going “back to 
basics” in teaching computer programming may 
avoid some of the problems teaching “objects first” 
has brought but would still not solve the problem 
of a difficult transition from procedures to objects 
that teaching “objects first” sought to address in the 
first place. 


earning computer programming essentially 

involves two things: computer algorithms and 

how data types are defined, designed, and used 
to solve problems. Meanwhile, novices need a para- 
digm shift away from solving problems with paper, 
pencil, and calculator toward solving them algorith- 
mically with conditionals and loops; they also need a 
gradual introduction of data types with consistency 
in a problem-solving context. We need a teaching 
approach that would better capture the essence of 
learning problem solving through programming with 
(instead) both procedural and object-oriented prob- 
lem-solving paradigms. One such approach might 
include the following content: 


° The difference between solving problems with 
computer programs and with paper, pencil, and 
calculator; | 

* The role of data types in problem solving through 
programming; 

* Variables and their roles in assignment statements 
and elementary programming activities; 

* Primitive and library-defined data types, includ- 
ing how they are defined, represented, and used; 

¢ Simple control structures, more roles for variables 
[3], and a first look at procedures or methods; 

* Problem solving with user-defined data types 
introduced in a context of solving meaningful 
problems; 

° Essential-yet-simple computing algorithms; 

¢ More control structures; 

* Array data types and more computing algorithms; 

* More problem solving with user-defined types, 
standalone procedures, or both; 

* Type inheritance and its role in problem solving; and | 

¢ Problem-solving case studies. 


This is neither “objects-first” nor “objects-later” but | 
serves as an invitation to better ideas in teaching — 
novices, not just how to program but how to solve 
problems through programming. We clearly need 
another approach to teaching programming to novice 
students besides “objects first” and “back to basics.” @ 
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ACM Fellows 


Te ACM Fellows Program was established by 


Council in 1993 to recognize and honor out- 

standing ACM members for their achieve- 
ments in computer science and information 
technology and for their significant contributions to 
the mission of the ACM. The ACM Fellows serve 
as distinguished colleagues to whom the ACM and 


| its members look for guidance and leadership as the 


world of information technology evolves. 

The ACM Council endorsed the establishment 
of a Fellows Program and provided guidance to the 
ACM Fellows Committee, taking the view that the 
program represents a concrete benefit to which any 
ACM Member might aspire, and provides an 
important source of role models for existing and 
prospective ACM Members. The program is man- 
aged by an ACM Fellows Committee as part of the 
general ACM Awards program administered by 


- Calvin C. Gotlieb and James J. Horning. 


The men and women honored as ACM Fellows 


| have made critical contributions toward and con- 


tinue to exhibit extraordinary leadership in the 
development of the Information Age and will be 
inducted at the ACM Awards Banquet on June 21, 


22 
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2008, at the Palace Hotel in San Francisco. 

These 38 new inductees bring the total number 
of ACM Fellows to 632 (see 
http://fellows.acm.org/homepage.cfm?srt=all for the 
complete listing of ACM Fellows). 

Their works span all horizons in computer sci- 
ence and information technology: from the theoret- 
ical realms of numerical analysis, combinatorial 
mathematics and algorithmic complexity analysis; 
through provinces of computer architecture, inte- 
grated circuits and firmware spanning personal 
computer to supercomputer design: into the limit- 
less world of software and networking that makes 
computer systems work and produces solutions and 
results that are useful—and fun—for people every- 
where. 

Their technical papers, books, university courses, 
computing programs and hardware for the emerg- 
ing computer/communications amalgam reflect the 
powers of their vision and their ability to inspire 
colleagues and students to drive the field forward. 
The members of the ACM are all participants in 
building the runways, launching pads and vehicles 
of the global information infrastructure. 
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By Dana Cuff, Mark Hansen, 


and Jerry Kang 


Urban Sensing: 
Out of the Woods 


Embedded networked sensing, 
having successfully shifted from 


the lab to the environment, ts 


primed for a more contentious 


move to the city to where citizens 


will likely be the target of data 
collection. This transition will 
warrant careful study and touch 
on tstted that go far beyond 


the scientific realm. 
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A fundamental shift is under way in pervasive 
computing. Within academic research, pervasive 
computing in the form of embedded networked 
sensing has leapt from the laboratory to the nat- 
ural environment [7]. Simultaneously, in the 
domain of personal communication and corpo- 
rate marketing, pervasive computing has entered — 


_ the backpack, purse, and coat pocket in the form 
of mobile phones, laying the groundwork for — 
Mark Weiser’s vision of ubiquitous computing _ 


[12]. We characterize this contextual shift as 
“urban sensing,” which augurs a fundamental 
transition from science and engineering into the 
realms of politics, aesthetics, interpretation, and 
motivation. More than a change in degree, this 
is a change in kind that warrants careful, trans- 
disciplinary study. 


In bucolic Lake Fulmor in 
the San Jacinto mountains, 
seven incongruous buoys dan- 
gle strings of thermistors to 
acquire time series of tempera- 
ture at several different depths 
(see Figure 1). Suspended from 
each buoy, at half a meter 
below the surface, is a sub- 
mersible fluorometer recording 
chlorophyll concentrations. A | 
team of biologists and engi- 
neers from the University of 
Southern California oversees 
the system and collects sensor 
data wirelessly from shore; 
visualization tools help this 
group examine both the physi- 
cal and biological dynamics in 
the lake. For a more complete 
picture of the local environ- 
ment, data from the buoys is 
combined with wind speed 
and other microclimate mea- 
surements from a _ nearby 
weather tower at the James 
Reserve, a biological field station that is part of the 
University of California Natural Reserve System. 

A robotic sensing device is installed at the deep 
end of the lake, sponsored by UCLA’s Center for 
Embedded Networked Sensing (CENS), an NSF 
Science and Technology Center (CCF-0120778). 
The robotic system consists of a cable that spans the 
lake at its widest point, oriented perpendicular to 
the line of buoys. A small shuttle rides along this 
cable carrying with it a sensor node that is dipped 
into the lake at regular intervals. The shuttle sub- 
merges the node and its cluster of sensors, taking 
measurements at several depths. The resulting data 
forms a grid, profiling temperature, chlorophyll 
concentration, and about a dozen other variables in 
the plane of the cable system. When paired with the 
static buoy data, a model can be formed that cap- 
tures the important chemical, physical, and biologi- 
cal processes in the lake. 

Nearby, buried wireless sensor nodes record soil 
temperature, moisture, and CO, concentration, and a 
robotic camera rides through an acrylic tube shooting 
pictures of roots and fungi. Still other devices moni- 
tor activity in nestboxes, where an image is collected 
every 15 minutes, then subjected to a series of pro- 
cessing algorithms that recognize whether the box is 
occupied as well as higher-level events like nest build- 
ing, egg laying, and hatching. The use of imagers as 
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biological sensors is a new 
research thread for CENS. 

The rollout of these embed- 
ded networked sensors has coin- 
| cided with other advances within 
the larger area of information 
technologies, and specifically the 
proliferation of geocoded data 
and the accompanying GIS plat- 
forms for its visualization. Ser- 
vices such as Google Earth have 
driven to nearly zero the cost of 
this visualization measured in 
terms of dollars, time-to-deploy, 
and technical sophistication 
required. So-called “mashups” 
with Google Maps provide any- 
one with a Web browser the abil- 
ity to display data (sounds, 
images, video, statistics, and so 
on) in map layers. In combina- 
tion with the embedded net- 
worked sensors, such systems 
have greatly reduced the techni- 
cal barrier to visualize data in real 
space, to construct maps of lay- 
ered information, and to analyze 
locational phenomena over time. 

The move by CENS from the 
lab to the forest has been a radical leap forward, push- 
ing the capabilities of sensors and robots, as well as 
offering rich new understandings of the forest itself. 
In the last five years, we have seen a shift in the 
emphasis of sensing research, with greater importance 
being placed on data, data processing, and mathe- 
matical and statistical models for environmental phe- 
nomena. While the move to the forest directly 
furthers CENS’ mission to grow technology in the 
context of specific scientific questions, the forest was 
an ideal site for scientists to conduct a series of fast 
experiments that sidestep the thorny cultural prob- 
lems of ubiquitous surveillance that have entered 
public debate. With James Reserve as today’s reality, 
we can ask: What happens tomorrow, when pervasive 
computing comes out of the woods and goes urban? 


Figure 1. Sensors 
floating in Lake Fulmor, 


THE City: SENSING GOES PUBLIC 

The James Reserve represents what might be called 
a full centralization model: sensors, the data they col- 
lect, and the ways in which the data is processed is 
subject to centralized control by the scientists who 
plan the sensor deployments. This model cannot, 
however, scale to the city. Even if the enormous 
funds were available, scientists lack the property 


MAKING URBAN SENSE 


A number of applications can be viewed online to get a snapshot of the state of urban sensing today. These range from 
provocative public art, to mapping mashups, to real-time traffic tracking. At present, the remote, spatial sensor networks 
developed within the sciences and the military share virtually no overlap with the “experience design” innovations coming 
from artists, though both families of experiments utilize similar strategies. These include geo-coded data collection, 
mobile and fixed sensors that are spatially distributed, sensing networked with processing and actuating capabilities, and 
time-sequenced data, to name a few. In general, these projects seek to make something previously invisible visible. Most 
work with the spatial distribution of information, but some take spatial behavior as their object of interest. 
Representations of urban sensing data vary widely in terms of their sophistication, both in terms of clarity and aesthet- 


ics. While some operate in the physical environment itself, others interpret the data, translating it into maps. 


The list here samples a range of interesting urban sensing experiments. 
D-Tower. A public sculpture in the Netherlands city of Doetinchem that displays the emotions of residents based on 


their responses to Web surveys; www.d-toren.nl/site. 


White Noise White Light. Meejin Yoon’s installation of a responsive sound and light field at the Athens Olympics; 


www.mystudio.us. 


Living City. Projects in which buildings’ sensors monitor environmental conditions that the buildings can responsively 


adapt to or improve; www.thelivingcity.net. 


Fade to Black. \n various cities, Natalie Jerimijenko’s upturned Webcams collect particulate matter on their lenses to lit- 


erally show pollution; www.bureauit.org/ftb. 


Feral Robotic Dog. Jerimijenko repurposes robotic toys into toxin-sniffing dogs deployed in packs to converge on 


detected hazardous waste; www.bureauit.org/feral. 


The Great Backyard Bird Count. Maps the cumulative counts of birdwatchers from across the U.S. over a four-day period; 


www.birdsource.org/gbbc. 


Did You Feel It? A USGS site that maps data from individuals about their experience of an earthquake; 


http://earthquake.usgs.gov/eqcenter/dyfi.php. 


Moveable Type. For the New York Times headquarters, the lobby installation by Ben Rubin and Mark Hansen spatially 


displays a dynamic portrait of the day’s news and news browsing; www.earstudio.com/projects/moveable_type.html. 


Valk Score. A mashup that assesses any neighborhood for its “walkability,” particularly for browsers determining where 


to buy or rent housing; www.walkscore.com. 


Urban gaming, like PacManhattan or Minneapolis’s Big Urban Game, are examples of an interactive, playful use of 
urban sensing; http://pacmanhattan.com/ http://design.umn.edu/go/project/TCDCO3.2.BUG 
[murmur]. Signs in the city give a phone number for anyone with a cell phone to listen to stories about that particular 


location. A good example is in Toronto http://murmurtoronto.ca. 
Real Time Rome. A project by MIT's SENSEable City Lab that visually represents real-time information about Rome’s 


urban dynamics; http://senseable.mit.edu/realtimerome/. 


TrafficSense. Cellint provides real-time traffic monitoring using cellular-based detection; 


www.cellint.com/traffic_data/traffic_system.html. 


For more general urban sensing, see the Geobloggers Web site, www.geobloggers.com/archives/, Google Maps Mania 


http://googlemapsmania.blogspot.com, and Google Maps Street View http://maps.google.com/help/maps/streetview/ 


index.html. 


rights to instrument everywhere, and individuals 
enjoy privacy rights not granted to sparrows. 

How then will pervasive computing ever manifest 
itself in the city? We believe it will be through the lit- 
tle device that 70% of U.S. citizens already carry: the 
cell phone. Although we think of cell phones as com- 
munication devices that we episodically and inten- 
tionally use, we should recognize they are also passive 
sensors that can silently collect, exchange, and process 
information all day long. Obviously, they are engi- 
neered to sense sound—our voices—but they also can 


—Dana Cuff 


sense images and movement through their built-in 
cameras. Still more interesting, they can sense location 
through GPS receivers or basic cell phone triangula- 
tion. In addition to sight, sound, and location, inside 
of 15 years, cheap sensors that detect other aspects of 
the environment like pollution, will be available as 
plug-ins. Although various factors such as infrastruc- 
tural rollout and pricing plans will influence adoption 
rates, we are confident that within this 15-year period, 
in most urban centers around the world, processing, 
visualizing, and uploading sensor data—even large 
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Figure 2. Interactive 
D-Tower in the 
Netherlands. Photo: 
Henk Vlasblom 


amounts of it—will be accessible 
to a large percentage of their pop- 
ulations. 

If the vector of entry will be an 
individual’s cell phone, we necessarily move away 
from the James Reserve's full centralization toward a 
model of distributed citizen-sensing, sometimes called 
participatory sensing |2, 3]. In this model, although 
some central authority maintains the basic terms and 
conditions of data collection as well as the centralized 
data repository, that authority employs local data col- 
lectors (people like us) who voluntarily and idiosyn- 
cratically record data. A good example of distributed 
citizen-sensing is the Great Backyard Bird Count. Still 
further along this spectrum, we could imagine a fully 
decentralized model, with no central authority beyond 
some actor providing basic storage and search. This 
approach is even more in line with the Web 2.0 ethos, 
which values unconstrained user participation. ' 


"See Tim O’Reilly’s What is Web 2.0: Design Patterns and Business Models for the Next 
Generation of Software. O’ Reilly Media, (Sept. 30, 2005); www.oreillynet.com/pub/a/ 
oreilly/tim/news/2005/09/30/what-is-web-20.html. 
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Another model of decentralized sensing comes 
from architecture, when measurements and models 
are shared between buildings with control systems 
that allow one building to shade another or mitigate 
the so-called urban canyon effect (for examples of 
these models, see the sidebar “Making Urban Sense’). 

Although it is difficult to predict where precisely 
on this spectrum we will end up, urban sensing shifts 
focus and control away from the scientist at the cen- 
ter. We can anticipate new forms of science built from 
large-scale citizen-initiated data collection. Data will 
also be collected, then interpreted, in ad hoc ways by 
everyday citizens going about their daily lives. This 
suggests that urban sensing will go not only beyond 
scientists, but beyond science itself. Should we be 
worried? 


BEYOND SCIENCE 

There are at least two concerns: bad data processing 
and the “observer effect.” First, when amateurs col- 
lect data through cheap, unverified, uncalibrated 
sensors, the immediate fear is “junk data.” This may 
be merely incidental as when cell phone images 
frame what the photographer wants to show, with 
no pretense about neutrality or comprehensiveness. 
Or it may be more purposeful when the data collec- 
tor has no commitment to epistemic objectivity. For 
example, neighbors documenting traffic congestion 
will rarely record traffic-free periods. Further, when 
statistically unsophisticated individuals interpret 
data, the immediate fear is “garbage analysis.” With 
many eyes watching a set of data, the opportunities 
for incorrect inference multiply. 

Second, observation generally and_ surveillance 
specifically alters human behavior. For example, video 
cameras for traffic or security are explicitly intended 
to alter conduct. When data collection is situated 
“outside” the thing being studied, observation 
remains arguably neutral. But when data collection is 
embedded among the actors within a setting, as in 
participant observation, a cycle of interactivity is 
launched in which observation changes behavior that 
changes observation and so on. 

These concerns are serious, but not insurmount- 
able. Various forms of distributed accountability can 
make data collection more reliable. For instance, a 
user may tell the network that certain sensors should 
“agree” with her measurements in order to register as 
acceptable or valid. Given its ubiquity, the sensing 
network itself can provide the redundancy necessary 
to identify and interrogate faulty data. For example, if 
one cell phone reports that it is moving 75 mph on a 
freeway, whereas all adjacent phones moving in the 
same direction report 45 mph, we can be skeptical of 


the outlier datum. Even in so-called bottom-up sys- 
tems, guarantors of data quality exist. In some sense, 
this is how we have come to identify reliable sources 
on the Web, when search engines like Google return 
millions of possibly relevant sources of information. 
In addition, data sharing projects like ManyEyes at 
IBM offer a kind of “social data analysis,” in which 
graphics are open to discussion; and through such 
interactions, inferences improve. 

More important, we embrace the idea that urban 
sensing can and should go beyond science, 
unabashedly, into the realm of art and politics. In 


ized collection, shared freely, and amenable to dis- 
tributed sense-making not only for the pursuit of sci- 
ence but also advocacy, art, play, and politics. One 
might ask how the data commons differs from the 
Web we already have, and indeed, the same question 
might be asked of the blogosphere and its relation- 
ship to the Web. Specific technological choices (syn- 
dication, linking, commenting) provide the 
blogosphere with its unique character. The same can 
be said of the myriad Web 2.0 applications that elicit 
user-generated content. Whether we view these new 
developments as an outgrowth of the open source 


The data commons and citizen-initiated sensing 
will provide answers, pose new questions, and open new 
opportunities for public discourse. 


these arenas, data quality may not be what is most 
important. To make this discussion more concrete, 
consider, for example the D-Tower, created by Lars 
Spruybroek/NOX for the city of Doetinchem in the 
Netherlands (see Figure 2). The D-Tower is a 12- 
meter tall public sculpture activated by responses to a 
Web site that surveys the mood of the townspeople. If 
most of the Doetinchemers are feeling fearful, it glows 
yellow, but when they’re in love, the beacon burns red. 
Here, we've added an entirely new dimension to 
urban sensing—an aesthetic one in which data 
(responses to the online mood survey) is subjected to 
a heuristic devised for purposes of pleasure, humor, 
curiosity, and to a lesser extent, scientific truth. 
Numerous cities, public institutions, and designers are 
collaborating on urban-sensing projects, creating 
dynamic events that engage the citizenry. By generat- 
ing publicity, these sensing mechanisms spark action 
and interaction, rather than merely record it. 
Although standards of data quality and participation 
apply to political and artistic projects, we can hardly 
ask whether the citizens are truthfully feeling happy 
when we observe a purple D-Tower. But we can 
debate whether the tower is responsive to and pro- 
vokes some community feeling. 


THE Data COMMONS 

In going beyond science, urban sensing has the 
potential to generate a “data commons.” By this, we 
mean a data repository generated through decentral- 


movement or of the success of a few participatory 
models (Wikipedia, YouTube), the applications on 
the Web today and the way data is structured and 
shared are fundamentally different than they were a 
decade ago. We think of the evolution of the data 
commons as an extension of this movement, offering 
a host of new applications, new data types, and data 
processing tools. As Natalie Jeremijenko contends, 
every sensor in the environment is a question. The 
data commons and citizen-initiated sensing will pro- 
vide answers, pose new questions, and open new 
opportunities for public discourse. 

The data commons resembles what we have previ- 
ously called a public sphere [7]. In prior work, Kang 
and Cuff provided a minimalist definition of the pub- 
lic sphere with four principal attributes: the public 
sphere must be accessible to diverse members; provide 
opportunity for multiple uses; encourage some sort of 
(and not always political) exchange among partici- 
pants (in the case of a data commons, this implies 
both the sharing and consumption of information); 
and be recognizable as such a space. Although these 
attributes were used to describe physical realms and 
social practices, they can also be usefully applied to 
the data commons. 

We are enthusiastic about a flourishing data com- 
mons for the same reasons we care about a vibrant 
public sphere. In particular, we are skeptical that 
democratic commitments will continue to be mani- 
fested—if they ever were—through stylized practices 
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of voting, political contributions, and face-to-face 
participation in local town hall meetings. Instead, 
individuals are increasingly manifesting their civics 
and politics through engagement of a public sphere 
understood far more broadly. This includes, for 
instance, “political shopping,” in which individuals 
use pervasive urban computing to inform their mar- 
ketplace decisions to further non-marketplace values, 
such as environmentalism or fair trade. Indeed, in the 
modern globalized capitalist environment, individu- 
als express their social and political values as much 
through consumption choices, like (Product) Red, as 
they do through voting. 

But practices such as political shopping (or “polit- 
ical eating” or “political commuting”) require access 
to the varied sorts of information that a sprawling 
data commons could best provide. Indeed, civic par- 
ticipation itself may be measured by our contribu- 
tions to the data commons. Take, for instance, the use 
of YouTube in the recent Presidential debates or the 
activity recorded by VideoTheVote.org in the last 
round of nationwide elections. Other examples that 
foreshadow a process of deeper civic engagement 
include reviews of products, tagging of data, com- 
ments on blogs, uploading of photographs and other 
information when newsworthy events take place— 
whether natural disasters or armed invasions—and 
citizen sensors are there to capture the moment. Con- 
sider a recent development, the so-called “placeblog.” 
These are sites that function somewhere between a 
local paper and a blog; they aspire to record the details 
of a particular place. Similar moves can be found in 
daylife.com and newassignment.net. Such initiatives 
are consistent with the spirit of participatory GIS, 
which explicitly enlists the community to make a case 
or to study some aspect of life locally. 


Bui_pinc A Data COMMONS 

A data commons is valuable because it allows all of 
us to engage each other about what we newly “see” 
in the places and communities we inhabit. And we 
cannot take the building of the data commons for 
granted. Notwithstanding the buzz over Web 2.0 
and sites like Flickr, it is presumptuous to think we 
will naturally and inevitably have a vibrant data 
commons, and the best possible one at that. What 
sort of data commons gets built depends on legal, 
policy, and technological (especially user interface) 
decisions we make now. 

Property. Consider, for instance, the law of intel- 
lectual property. Copyright law only protects creative 
expressions; it does not protect the underlying data. 
Accordingly, one might be anxious that “data” will be 
underproduced because there will be no easy way to 
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incentivize its collection and distribution. This fear 


misunderstands what drives our contributions to the 
data commons. Countless examples of cooperation, 
collaboration, and even play, especially mediated 
through the Internet, demonstrate that many sub- 
stantial projects are not motivated by the prospect of 
significant financial remuneration (for example, 
Amazons Mechanical Turk, weatherunderground. 
com, and the Google Image Labeler). 

Instead of financial gain, one of the biggest moti- 
vators for citizen-sensors to share data may be attri- 
bution. Content providers tabulate hits and the 
number of blog links, while the USGS’s “Did you feel 
it?,” which asks citizen-sensors to record how strongly 
they felt earthquakes, allow data collectors to see how 
their data contributes to a larger whole. Such attribu- 
tion can be designed without any expansion of intel- 
lectual property rights over data. 

In fact, creating robust intellectual property rights 
over data risks a tragedy of the anticommons, a con- 
cept introduced by Michael Heller [5]. If too many 
property rights are created, the cost of coordinating 
permissions among multiple, fragmented property 
rights owners prevents otherwise interesting, useful, 
and dynamic engagement with the data. To provide 
an urban sensing example, imagine geocoded digital 
images uploaded to some photo-sharing site. If some 
3D visualization mashup required IP clearances for 
each and every photograph, the transaction costs— 
even imagining efficient intermediaries—would be 
prohibitive. 

Privacy. Because urban sensing collects informa- 
tion in environments inhabited by and directly con- 
nected to human beings, the data collected will often 
constitute personal information. Accordingly, urban 
sensing raises serious privacy concerns in a way that 
surveillance in the woods largely avoids. To be precise, 
by privacy, we mean information privacy. an individu- 
al’s claim to control how personal data is collected, 
distributed, and processed [1, 3, 6, 10]. A patchwork 
of privacy laws already pertains to various aspects of 
urban sensing, especially when it takes place in private 
property not generally accessible to the public. The 
common law tort of invasion of privacy as well as 
statutory limitations on video and audio taping could 
prevent various forms of urban sensing—an obvious 
issue to consider. Two less obvious aspects of the pri- 
vacy problem are worth mentioning: self-surveillance 
and network solutions. 

We tend to think of privacy claims being stated by 
the target of observation, and infractions as generated 
by others, be they corporate, state, or individual. 
While the threats such agents could wage in a distrib- 
uted network should not be discounted, there is 


another type of incursion that is rarely debated. 
Because sensors will be carried on our bodies, in our 
automobiles, or sited on our real property, the persons 
about whom most information will be collected are 
ourselves. Persuading individuals to engage in such 
constant self-surveillance and then subsequently to 
share that data pose nontrivial hurdles entirely inde- 
pendent of the privacy claims raised by third parties. 
This is so even in the world of JennyCam and 
You Tube exhibitionism. 

Whether we decide to engage in self-surveillance 
for the purposes of urban sensing depends in part on 
what the underlying computing technologies allow us 
to do. For example, if computer security is weak and 
information collected for personal use is vulnerable to 
third-party hacks, we will be less likely to collect that 
information in the first place. Similarly, if personal 
data cannot be easily scrubbed to become anonymous 


from a cursory analysis of the kinds of information 
disclosure deemed sensitive over time. Thus, today’s 
exotic and disturbing data collection practices may 
appear banal 10 years hence. To the extent that pri- 
vacy preferences are adaptive to the environment in 
this manner, we must be aware that today’s policy 
choices will have long-term path-dependent effects. 

Interface. Even if individuals are motivated to par- 
ticipate and the underlying legal regimes make it pos- 
sible to do so, user interface is critical to both data 
collection and interpretation. For example, if collect- 
ing and uploading (known as sensor blogging or 
“slogging”) local pollution data is too difficult or 
costly, people will simply avoid the hassle, or if 
searching for useful data is futile, the data commons 
will not grow. 

Part of the success of blogs can be attributed to 
extremely simple tools for creating and publishing 


Today’s exotic and disturbing data collection practices 
may appear banal 10 years hence. To the extent that 
privacy preferences are adaptive to the environment in 
this manner, we must be aware that today’s policy choices 
will have long-term path-dependent effects. 


or pseudonymous or if it is difficult to control the 
granularity of data being released, people may be less 
likely to share that data publicly. 

The network itself can develop services to help 
individuals negotiate their various privacy relation- 
ships [3, 11]. For example, two of the most extensively 
studied problems in traditional sensor networks are 
localization and time synchronization. The network 
knows (or will shortly know) precisely when and 
where data is published. While these two pieces of 
data are critical for scientific applications, they raise 
privacy concerns in urban settings. The network 
could, if properly designed, implement a kind of res- 
olution control by verifying data up to whatever res- 
olution that a user permits. The tighter the 
resolution, the more useful the data downstream; but 
this choice could be left up to the individual provider. 

Of course, whenever we think about “choice,” we 
must recognize not only the cognitive limitations in 
the exercise of such choice but also that privacy pref- 
erences depend heavily on the background culture. 
Privacy preferences are adaptive, as should be evident 


content. Perhaps more important than content cre- 
ation, the simplicity of sharing this information is 
key, as are distribution mechanisms like RSS that 
allow people to register interest in content and 
(thanks to reblogging tools) republish selected por- 
tions. This pipeline model is not dissimilar from 
what we might expect from citizen-sensing. Easy data 
discovery, subscription, and republication will be cru- 
cial. 

Far from a database query, it would be a reasonable 
outgrowth of existing technologies if the data com- 
mons were built from disparate sources of shared data 
(following simple publication mechanisms), infor- 
mally organized (as with meta tags), open for discov- 
ery, visualization, and comparison, and subject to 
republication (modeling feed-forward). In part, dis- 
covery in the data commons might borrow from 
these existing services, relying on 
republication/aggregation/modeling as a kind of link 
between data sources (for example, if I generate an 
interesting graphic or fit a regression using your data, 
a link is automatically established) [4]. 
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LEGAL IMPLICATIONS OF URBAN SENSING 


In addition to laws on property and privacy, questions of legal liability will influence how the data commons grow. Con- 
sider, for example, the potential liability of database intermediaries. Even in what we call a fully decentralized model of the 


data commons, it is highly likely that some database intermediaries will have to provide the basic platforms necessary for 


data search and storage. Current examples include Google, YouTube, and Facebook. The basic question is whether a firm 


such as Google should be held liable for the content it hosts. 


This question has been carefully studied in the context of third-party copyright liability, but copyright does not attach 
to data. More relevant in this context is whether database intermediaries might be held liable under tort law, such as 


defamation. On this matter, unexpected legal reinforcements buttress the creation of a data commons by immunizing 


intermediaries. 


Among federal laws, consider the significance of 47 U.S.C & 230, which was passed as part of the Children’s Decency 
Act (attempting to regulate Internet pornography), itself part of the 1996 Telecommunications Act. Under this provision, if 


some unrelated person uploads data onto a data commons platform provided by an intermediary, that intermediary may 


not be held liable for the damage that data might do. In practice, this means Google can provide database infrastructure 


for the general public to use with little concern about liability about what data is, in fact, uploaded. 
Among state laws, consider the significance of anti-Strategic Litigation Against Public Participation (anti- SLAPP) 


statutes. These statutes, which are now common, were originally enacted to make sure that whistleblowers and political 


speech would not be chilled by aggressive litigation by large defendant corporations. But such a statute has been used to 


prevent overreaching by those who would stop data sharing within a data commons. 

The celebrated case concerns Barbra Streisand, or more particularly, her home. The California Coastal Records Project 
(CCRP) has taken over 12,000 photographs of the California coast since 2002, in part to document incremental changes 
along the Pacific coastline. But some of those pictures included aerial shots of Streisand’s house. Asserting a privacy vio- 
lation, she sued. The CCRP responded with a special motion to dismiss under the California anti-SLAPP statute, and won 


that motion because Streisand did not have any colorable privacy claim. More important than the quick victory is the fact 
that the statute requires paying of attorneys’ fees, thereby making it more difficult for wealthier parties to use meritless 


lawsuits as a chilling measure. 


The point here is not to provide an exhaustive list of relevant legal regulations. Rather, it is to emphasize how legal 
protections designed for very different contexts may have surprising or unexpected consequences on the building of the 


data commons. 


THE FATES 

The mere existence of a data commons is not a 
panacea since it is essentially public infrastructure— 
a powerful resource that can be misused or under- 
realized. Here, we forecast potential fates of the data 
commons by drawing on Greek mythology. 

Sirens. A mantra in the field of embedded network 
sensing is that it will “make the invisible visible.” This 
has already taken place in scientifically controlled nat- 
ural environments. It will soon take place within our 
cities, through decentralized processes, often without 
scientific goals or consequences. New sensing capabil- 
ities can make insidious urban qualities, such as 
buried toxic waste sites or ground water toxins, more 
visible to citizens. However, the new vision may be 
more like the Siren’s song seducing us to make poor 
choices. 

More information does not necessarily produce 
more rational (in the sense of instrumentally effica- 
cious) decision making. Well-known cognitive biases 
might lead us to pay more attention to particular 


types of data than they rightly deserve. Consider, for 
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example, the rough and ready risk calculation that 
individuals make in deciding where to live. If the data 
commons offer ready depictions of violent crime rates 
in the city, such information might persuade people 
to move to the distant suburbs in spite of the far 
greater mortality risk created through the increased 
highway driving. Relying on this highly salient, uni- 
dimensional “crime statistic” could produce a self-ful- 
filling prophecy that makes those areas with high 
crime rates grow more dangerous, while other areas 
get ever lower crime rates. 

In response, we encourage data presentation prac- 
tices that self-critically examine how individuals 
might easily misunderstand the data. And since none 
of us is entirely objective, we encourage what might 
be called “rights of reply.” Just as blogs often provide 
spaces for comments, we envision data visualizations 
linking interpretations to counter the Sirens with 
their own melody. 

Cyclops. In one version of the tale, the Cyclops is 
granted the power to see the future: again, the invisi- 
ble suddenly becomes visible. Unfortunately, the 


Cyclops is deeply saddened because the only future he 
is permitted to see is the circumstance of his inevitable 
death. As they say, when the gods want to punish you, 
they grant you your wish. 

The tragedy of the Cyclops—that is, the impossi- 
bility of effecting change notwitstanding foreknowl- 
edge—might be visited upon us as part of the data 
commons. For example, it is possible that distributed 
environmental sensors could detail with alarming pre- 
cision the nature and extent of our environmental 
poisoning. Those without financial or political means 
may be left with debilitating information about the 
nature of their demise without any practical ability to 
change their circumstance. Might there be some way 
out of this fate? 

Without attempting any grand theory about how 
and when new information might catalyze change in 
political, social, and economic systems, we offer one 
novel idea: arbitrage our ignorance. This draws on the 
idea of a “veil of ignorance” offered by the widely read 
political philosopher John Rawls [8], who famously 
argued in favor of adopting principles of justice that 
would be agreed upon by persons in an ideal choice 
position (called the “original position”), which 
included deliberation behind a “veil of ignorance.” 
This veil prevented persons from knowing what sta- 
tion of life they would find themselves in. If urban 
sensing lifts the veil by making the invisible visible, we 
must find ways to create some consensus before we 
learn the new information. After the information 
arrives, the predictable reaction is for the rich and 
powerful to respond to that information in self-serv- 
ing ways. By precommitting to a particular principled 
response before the veil is lifted, we may be able to 
mobilize the collective resources necessary to avoid a 


tragedy of the Cyclops. 


CONCLUSION 

Embedded network sensing has made the leap from 
the laboratory to the natural environment through 
the careful design of professional scientists. It is now 
crossing into the urban context, but leaving behind 
the primacy of both scientists and science. The wide- 
spread use of cell phones, availability of GIS-related 
technologies, growth of Web 2.0, along with 
advances in sensor technologies have unleashed 
urban sensing. This new arena is fertile ground for 
participatory, collaborative efforts between citizens 
and scientists, artists, urbanists, and business people. 
As a form of public infrastructure, the data com- 
mons is essential for citizen participation in politics, 
civics, and aesthetics—as well as science. What we 
do today will influence what the data commons 
becomes tomorrow. And only through deliberative 


effort and political engagement can citizens navigate 
around Siren calls and the tragic Cyclops. @ 
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Get your CSCW Submissions Ready! 


CSCW is the premiere conference on the technical and social aspects of communication, coordination, 
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some new, for you to participate and collaborate. 
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Panels 2 May 2008 
Student Volunteers 31 May 2008 
Doctoral Colloquium 18 July 2008 
Interactive Posters 18 July 2008 
Demonstrations 18 July 2008 


Videos 18 July 2008 


Information 
Questions and requests for information 


should be sent to publicity@cscw2008.org 


Also, see our website www.cscw2008.org 


BY JASON O.B. SOH AND BERNARD C.Y. TAN 


Recent technological advances in mobile devices have pro- 
duced powerful mobile phones and personal digital assistants 
that come with ever-greater computing power, storage capac- 
ity, and graphical and audio capabilities. Playing games on 
them continues to attract millions of subscribers/players 
worldwide. For example, mobile gaming was the highlight of 
the 2006 Electronic Entertainment Exposition in Los Ange- 
les, with Nokia showcasing its Next-Gen Mobile Gaming 
Platform and a series of new game releases. Also, several 
speakers at the same show cited numbers showing that an 
increasing percentage of users of mobile devices use them to 
play games. 


Tens of millions 

of users worldwide 
play games, as well 
ad make phone calls, 
on their cell phones 


ano other handheld 


Oeviced. 
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A 2004 In-Stat/MDR study said that about 6.5% 
of U.S. mobile-device subscribers were “extremely 
interested” or “very interested” in purchasing mobile 
game services [9] and projected that by 2009, 78.6 
million people in the U.S. would be playing mobile 
games; it also said downloads of mobile games will 
have increased tenfold compared to 2003. Zelos 
Group found that in the U.S. alone, mobile games 
could generate $1.5 billion annually in revenue by 
2009. In Europe, a 2003 study by Frost & Sullivan 
reported that revenue from mobile games would rise 
from just under $0.8 billion in 2002 to $7 billion in 
2006 [1]. In the Asia-Pacific region, IDC reported 
that the wireless gaming industry is growing 40% 
annually and expects it to reach $1.3 billion annually 
by 2008. 

Demand for mobile games is 
fueled by three main factors: 


that 114 million people worldwide would be playing 
online games by 2006, most in the form of mobile 
games [6]. While industry analysts would not dispute 
the significance of the trend toward mobile gaming, 
many questions remain. Here, we examine key tech- 
nology factors behind the trend and analyze the 
opportunities for and threats to key players (and 
potential new entrants) in the computer gaming 
industry. 

The mobile gaming technology platform typically 
comprises a network linking a server and numerous 
clients (mobile devices). Through the server, which 
stores and controls game services, game providers are 
able to publish and distribute mobile games for play- 
ers to download on their mobile devices. Some such 


devices may be gaming enabled (such as the Nokia N 


* Increasing mobile device pene- 
tration rates in many coun- 


3G Broadband, packet-based transmission of 


text, voice, video, and multimedia 


Data rates up to 2Mbps 


Quality graphics and sound, enhancing 
gaming experience 


Bigger games downloaded in less time 


High-quality multimedia and 3D games with 
greater speed and efficiency 


Bigger games downloaded in less time 


More players 

“Global” multiplayer gaming 

Mobile games played “on the move” 
Colorful images 


Multiplayer games (such as Nokia’s 
Pathway to Glory) 


tries, especially Finland, Japan, 46 Interactive multimedia services with greater 
bandwidth, digital elements, global mobility, 

Korea, and Sweden; many service portability, and network security 
users of mobile devices are Foea rates ups 100Mbps 
potential consumers of mobile 
games; 

* The ability of mobile devices GPRS “Always-on,” higher-capacity data services 
ro. deli ii id J (such as email, Internet browsing, : 

oO deliver quality video an multimedia messages, visual communication, 
audio continues to improve and location-based services) 
significantly, making such Data rates up to 171kbps 
devices suitable for playing Bluetooth Short-range wireless networks within 10 


mobile games; and 

* The improving ability of wire- 
less networks to handle broad- 
band transmission, allowing 
users of mobile devices to 
download larger and more 
compelling mobile games. 


Table 1. Wireless 
communication 
platforms for 
mobile games. 


They represent both business opportunity and 
threat for wireless carriers, application developers, and 
content providers. Indeed, they are happening so 
quickly that industry observers believe they can alter 
the basis of competition in the computer gaming 
industry. Key players have expressed a desire to exploit 
it. For instance, mobile device manufacturer Nokia 
launched gaming communities to build awareness 
and use of mobile games. As a major game publisher 
in Japan with 2.5 million subscribers for its mobile 
game services, Sega hopes to achieve similar success in 
the U.S. In its 2004 study, In-Stat/MDR said that 
mobile gaming would continue to increase in impor- 
tance as a contributor to telecom industry revenue. A 
2002 research report from DFC Intelligence forecast 
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metres inexpensive and easy to connect 


Local-area multiplayer mes (such as 
N-Gage by Nokia and Zodiac by Tapwave) 


Data rates up to 2.1Mbps. 


series). When mobile gaming users connect to the 
server, they are able to join multiplayer games, down- 
load new games, and view their scores. In online- 
game-play mode, players access the server to play 
mobile games with other players. In offline-game-play 
mode, players use Bluetooth-enabled mobile devices 
to form local area networks with other players (within 
a distance of about 10 meters) to play mobile games. 
Recent advances in wireless technology (in terms of 
speed and bandwidth) provide practically instanta- 
neous data transfer, thereby enabling millions of peo- 
ple to play mobile games on the go (see Table 1). 

To support the explosive growth in the mobile 
gaming market, technology platforms are being cre- 
ated for the development of the games. Sun Microsys- 
tems’ Java 2 Platform Micro Edition, or J2ME, and 
Qualcomm’s Binary Runtime Environment for Wire- 
less, or BREW, are the most prominent technology 
platforms used in the industry. Each offers an 
enhanced user interface, improved application usabil- 


ity on small screens, and the ability to create games 
that can be run offline, eliminating the need for a con- 
stant network connection. Other promising technol- 
ogy platforms include Mophun (from Synergenix 
Interactive), ExEn (an execution engine from In- 
Fusio), and XNA (from Microsoft) (see Table 2). 

The convergence of technology platforms is an 
opportunity for mobile-game content developers to 
target a worldwide market. They can develop mobile 
games for common platforms (such as J2ME and 
BREW). They can also quickly adapt existing mobile 
games for the common platforms. Given such bene- 
fits, different mobile-game content developers are 
likely to create mobile games that are compatible 
(based on the common platforms). 


J2ME 


(Java-based) 
Allows mobile device makers, wireless carriers, and enterprises to 
quickly develop, install, and run new games on wireless networks 
Widely accepted standard that works with multiple platforms 
Improves graphic and multimedia capabilities to suit mobile devices 
BREW Optimizes memory allocation, making it suitable for mobile devices 
(C-based) with limited resources 
Supports game operators with such capabilities as secure 
over-the-air distribution of applications, billing and payment, and 
service monitoring and support 
Allows games to be played more quickly because it runs on C 
rather than Java 
Mophun Enables rich gaming experience with advanced 3D graphics, 
(C-based) enhanced audio, and multiplayer capabilities 
ExEn Provides good graphical capabilities and fast processing speeds 
(Java-based) 


Enables additional game-development capabilities (such as sprite 
zooming, parallax scrolling, ray casting, and rotations) 


Major producers of mobile devices aggressively try 
to alleviate the related technology limitations. For 
instance, the Nokia N81 handset (released in 2007) 
comprises a 16.7 million-color screen with integrated 
stereo speakers and full support for Java ME gaming 
applications. It can also switch effortlessly between 
portrait and landscape modes for playing games. 
Faster processors are also being used to enhance 
mobile devices for playing games. For instance, the 
Nvidia GoForce 3D (the world’s first 3D wireless 
media processor, introduced in 2004) offers a level of 
processing not previously possible on mobile phones, 
PDAs, or other mobile devices. Mobile game devel- 
opers are thus able to harness this powerful technol- 
ogy to create rich, dynamic, lifelike worlds and 
characters. Another example is the Imageon 3200 
chip (from ATT) that allows higher-quality graphics 
and video to be displayed on standard PDA displays, 
thus boosting the quality of the gaming experience. 

Research by Informa Media Group suggests that by 


Enables Java-based games to be played on mobile phones and PDAs 


2010, mobile gaming will overtake both console and 
personal computer gaming in terms of market value. 
As new entrants challenge incumbents for this grow- 
ing slice of the gaming industry pie, there is likely to 
be fierce competition by “content aggregators, pub- 
lishers, handset manufacturers, resellers, and network 
operators” [3]. Key players in the gaming industry 
must position themselves to be able to exploit the new 
opportunities that are likely to follow. 

The development and marketing costs for a con- 
sole or personal computer game may run in the mil- 
lions of dollars. In comparison, such costs for a mobile 
game are typically $100,000 to $200,000 (2006 esti- 
mates); for details, see www.aniway.com/flash_lite_ 
for_mobile_game_developers/?p=35. Moreover, 
development kits for mobile 
games are widely available from 
phone manufacturers, including 


Nokia Series 40 . ‘ . 

and 60 devices, Nokia, helping mobile-game con- 

CS a tent developers create content for 
their phones. The low entry barri- 
ers for mobile games have helped 
spawn a proliferation of small 

Motorola T720, ‘ 

Samsung A530, mobile-game content developers. 


soups ate A challenge confronting these 


developers, which typically lack 
strong marketing and distribution 
networks, is getting their products 
to consumers. Two possible solu- 
tions are: 


Sony Ericsson, 
Motorola, N-Gage 


Philips, Alcatel, 
Mitsubishi, Panasonic 
Partners. Content developers can 


enlist mobile device manufac- 
turers and network operators to 
distribute their products; for 
example, in 2004 Jamdat 
Mobile signed a series of agree- 
ments with network operators 
to make its products available to 880 million 
mobile device users worldwide. In Singapore, 
Gameloft (an emerging mobile-game-content 
developer) signed agreements with three major 
network operators—Sing Tel, Starhub, and M1— 
to distribute its products; and 
Mergers and acquisitions. Content developers can 
enhance their long-term prospects through merg- 
ers or acquisitions. A larger mobile-game-content 
developer is more likely to survive than its 
numerous small mobile-game-content-developer 
counterparts. An example is Mforma, which went 
on an aggressive acquisition spree 2001-2004 [4]. 


Table 2. Technology 
platforms for develop- 
ment of mobile games. 


Mobile-game content developers can also focus on 
women, a still often-neglected consumer segment seg- 
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ment of the gaming industry. Men generally prefer 
sports, shooter, and other action-game genres. 
Women are more likely to play puzzle and role-play- 
ing games. The focus of the gaming industry has his- 
torically been male players. But now mobile games are 
being developed to appeal to both genders. For exam- 
ple, The Sims is a runaway success in terms of revenue 
among both men and women. The trend seems sus- 
tainable because women tend to spend more on ser- 
vices related to mobile devices than do men. An 
article [2] highlighted the significant growth in the 


Key players in 

the gaming tndustry 
mudt position themselves 
to be able to exploit 

the new opportuntttes 
that are likely 

to follow. 


number of women worldwide eager to play and will- 
ing to pay for mobile games. Mobile-game-content 
developers can exploit such opportunities by develop- 
ing mobile games specifically for women. 

As of January 2008, the use of 3G services is still 
much less than anticipated by industry analysts, 
mainly due to the prohibitive cost of 3G licenses and 
potential 3G implementation problems. Likewise, 
multimedia messaging has not taken off as predicted. 
Therefore, the current strategy of network operators is 
to try to derive more revenue from nonvoice services 
(such as downloading ring tones and pictures). Net- 
work operators increasingly look to sell services for 
downloading mobile games. Unlike other players in 
the industry, this should not be such a problem for 
network operators since the downloading of mobile 
games is like other nonvoice services. 

The network operator Vodafone took such an ini- 
tiative in 2002, launching the Vodafone Live! suite of 
services to integrate services like picture-sending, Java 
games, mobile Internet, and ring tones into a coher- 
ent package accessible over the general packet radio 
service network. In doing so, Vodafone was able to 
capture a good slice of the fast-growing mobile-gam- 
ing market. The strategy of integrating services is also 


being practiced by the Japanese network operator 
NTT DoCoMo through its highly successful i-mode 
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services. Network operators are generally not strong 
in content creation, so a collaborative strategy would 
be useful. As an example, T-Mobile (a network oper- 
ator) and Sony Pictures (a content creator) collabo- 
rated in 2002 to create “film-themed games for 
T-Mobile’s wireless subscribers” [8]. Such a strategy 
builds on interest created by movies while encourag- 
ing nongamers to try out mobile games. 

Another potentially lucrative business that network 
operators may also be able to exploit is massively mul- 
tiplayer online games (MMOG). Unlike mobile 
games sold as a product that generates one-time rev- 
enue, MMOGs can provide network operators with 
an ongoing subscription-based revenue stream. As 
MMOG players subscribe in order to play with thou- 
sands of other players worldwide, they provide a self- 
generating revenue stream for network operators in 
the form of monthly subscription charges and data- 
transfer fees. Thus, network operators can link up 
with MMOG developers to create and market such 
games while providing potentially lucrative network 
support. A successful example is Botfighters, a mock 
combat game in which players use their cell phones to 
locate and “kill” opponent robots (released in 2000 
by Swedish mobile-game developer It’s Alive). This 
MMOG (which has since undergone numerous revi- 
sions) is played by tens of thousands of gamers in Fin- 
land, Ireland, Russia, and Sweden. In 2004 the game 
generated more than one million short messages per 
week in Moscow alone. 

Manufacturers of mobile phones regularly intro- 
duce new models in a bid to attract new customers or 
get existing customers to upgrade their handsets and 
hasten the replacement cycle, as well as renew their 
contracts with their existing service providers. One 
way to do this is to exploit the growing interest in 
mobile gaming. For instance, in 2002, Nokia intro- 
duced the N-Gage (which has since undergone sev- 
eral improvements), combining the features of a 
mobile phone, an MP3 player, and a mobile gaming 
device. The N-Gage continues to be positioned as a 
direct competitor to the dominant mobile gaming 
devices—Nintendo’s GameBoy Advance and Sony’s 
PSP. Some PDA manufacturers have adopted a simi- 
lar strategy. For example, Tapwave's Zodiac (released 
in 2004 in Asian markets) has received positive 
reviews as a PDA/mobile gaming device hybrid. In 
2003, Sprint PCS released its Game Pad controller, 
which works with the Samsung A600 cell phone 
(introduced in 2003) to add console-like control to 
mobile games. The Sony Ericsson P800 combines a 
PDA and mobile-game device [5]. 

These innovations have generated profits over the 
past five years, despite the millions of dollars Nin- 


tendo has generated in sales of handheld gaming 
devices, including the Wii video game console (intro- 
duced in 2006). However, as new entrants, mobile- 
device manufacturers may indeed face formidable 
challenges from incumbents as they try to capture 
market share. Nevertheless, as they enhance the gam- 
ing capabilities of their products, mobile-game-con- 
tent developers can create more vivid and faster-paced 
games to entice mobile-phone subscribers to play 
mobile games. 

Console manufacturers have traditionally provided 
the platforms for computer games. But with the rising 
tide of mobile gaming, console manufacturers would 
face tough competition from new entrants (such as 
mobile device manufacturers). Mobile devices in the 
near future should be expected to have better process- 
ing power, enhanced 3D graphics performance, and 
better audio capabilities. Meanwhile, Intel and 
Hitachi have developed specialized microchips for 
mobile phones to improve the quality of mobile gam- 
ing. In addition, improved network bandwidth and 
storage capacity have begun to put mobile devices on 
par with consoles. Indeed, the very existence of con- 
sole manufacturers is threatened by such devices. 

It is thus essential that console manufacturers 
improve their product appeal by combining gaming 
and general electronics functions. An example is the 
Sony PlayStation 3, with high-definition DVD and 
HDD recording capabilities, a product positioned as 
an integrated entertainment system, transcending the 
idea of mobile gaming. Microsoft's Xbox platform has 
also followed this trend by incorporating Internet, 
video, and photo-editing functions into the latest 
Xbox 360 console. Console manufacturers should also 
view backward compatibility as an important feature 
in future console development, protecting gamers’ 
investment in earlier games while giving them access 
to the latest ones. Indeed, the success of Sony’s domi- 
nant PlayStation 2 was due largely to its ability to 
allow gamers to play games made for its predecessor, 
the original PlayStation. 

‘Traditional game-content developers have provided 
games for arcades and personal computers since the 
1970s. Games now considered classics include Pac-Man, 
Donkey Kong, and FIFA Football. These developers 
have positioned themselves to create versions of their 
existing games for the emerging mobile-gaming context, 
thereby allowing gamers to play the classics anytime any- 
where. For instance, Electronic Arts (an established game 
developer with much success in both console and per- 
sonal computer games) has ramped up its effort to 
extend the highly popular FIFA Football and Tiger 
Woods Golf games to mobile gaming platforms [7]. 

Due to a lack of diversity, hardware inflexibility, 


and immobility, arcade games have experienced a 
steady decline in recent years. The emergence of 
mobile games further threatens this business. Hence, 
arcade-game-content developers must focus on games 
that cannot be played in a mobile-gaming context. 
They must design and develop new games with 
unique characteristics (such as those that involve body 
movement). Through props (such as motorcycles, 
dance pads, race cars, and musical instruments), these 
developers have managed to create several arcade 
games (such as Initial D Arcade Stage 4, released in 
2007) that offer a more realistic experience (that can- 
not be replicated in a mobile gaming context). They 
are also exploring the possibility of incorporating net- 
work capabilities into arcade games by enabling play- 
ers to engage in Web-based interactive arcade gaming. 

As mobile devices become an indispensable com- 
ponent of everyday life, the market for mobile gaming 
is likely to continue to increase well into the future. 
Incumbents in the computer gaming industry must 
adapt to remain viable. New entrants to the industry 
can exploit the many new opportunities that are still 


emerging. @ 
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PATTERNS, SYMMETRY, and 
SYMMETRY BREAKING 


Explaining software patterns by breaking the symmetry 
created by programming languages. 


"oftware design patterns capture tried and successful 
design solutions [6]. Among different views on 
design patterns is that they are created to compen- 

} sate for the design shortfalls in programming lan- 

guages [5]—that is, design patterns are needed 

when programming languages cannot do the job in a 
straightforward way. Based on this view, Coplien and Zhao 
[5] postulate that there is a causal relationship between lan- 
guage features and design patterns and that relationship is 
couched in a more fundamental relationship between sym- 
metries and broken symmetries. This article builds on that 
postulation and provides a further understanding and fresh 
articulation of patterns, symmetries, and broken symmetries. 
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Most people have an intuitive understanding of 
symmetry, which often means a well-proportioned, 
well-balanced image, such as the appearance of the 
human body. In mathematics, symmetry is an opera- 
tion (for example, a reflection) that manipulates the 
image (the human body in this example) rather than 
the image itself [10]. More accurately, symmetry is a 
geometric transformation under which the form of the 
image remains unchanged [10]. For example, reflec- 
tion is a symmetry trans- 
formation under which 
the human body 
remains the same. Other 
symmetry transforma- 
tions are rotation and 
translation. Hence a 
perfect starfish looks the 
same under five rota- 
tions (see Figure 1a), 
five reflections (see Fig- 
ure 1b), and any number 
of translations—shifting 
along a straight line; a 
round ball remains the 
same under any number 
of rotations and transla- 
tions. Objects like these, 
which remain unchanged upon reflection, rotation, or 
translation, are said to be symmetric or to exhibit 
symmetry. 


360° 


72° 


144° 


(a) 


Figure 1. (a) The perfect starfish 
has a 5-fold rotational symmetry, 
about the axis through the center 
by 72°, 144°, 216°, 288°, and 360°; 
(b) 5-fold reflection symmetry, one 
for each arm. 


here is a close relationship between 

geometric symmetry and the concept 

of invariance [12]. Symmetric 

objects are also said to be invariant, 

because their geometric features are 

preserved (unchanged) under sym- 
metry transformations. Almost every conservation 
law in physics stems from fundamental symmetry in 
nature or from some basic principle of invariance. For 
example, the energy conservation law is based on the 
principle that the total energy, including that bound 
up as mass, must stay constant after a physical inter- 
action. Hence, a physical interaction is a symmetry 
operation on the energy, which leaves the amount of 
energy unchanged. 

Symmetry is closely related to isomorphism. From 
the viewpoint of abstract algebra, a symmetric system 
is isomorphic with itself; or, phrased differently, a 
symmetry operation is an isomorphism between two 
identical configurations of the system. For example, 
the starfish exhibits pentamerism and is isomorphic 
with respect to five rotations (see Figure 1a) and five 
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reflections (see Figure 1b); each of these 10 symmetry 
operations is an isomorphism between two identical 
configurations of the starfish. Thus, isomorphism 
requires that two symmetric systems are not only 
apparently the same but also are exactly the 
same. Many programming features can be explained 
using symmetry either in its general concept of invari- 
ance or in its specific form of geometric transforma- 
tion [5]. 


SYMMETRY BREAKING 

In physics, symmetry 
breaking happens when a 
force disturbs a symmetric 
system and causes it to 
break its symmetry to 
maintain its stability. This 
phenomenon has _ been 
explained in great detail by 
Stewart and Golubitsky 
[10] with abundant exam- 
ples. One example is a splash of a milk drop. When 
a drop of milk hits the surface of a bowl, its spheri- 
cal symmetry is broken into a crown (see Figure 2a). 
Under ideal conditions, a bilaterally symmetric air- 
craft should fly straight; in reality, however, the air- 
craft flies in a slightly zigzag way, because the flow of 
air past the aircraft is not bilaterally symmetric and 
the aircraft must break its symmetry to maintain its 
stability. Symmetry breaking is an important con- 
cept in many scientific fields. For example, the 
embryo development in biology and the electroweak 
interaction in physics are explained as a process of 
symmetry breaking [10]. 

Yet symmetry breaking does not mean a total loss 
of symmetry, only a partial loss. Before the milk drop 
hits the surface of a bowl it is invariant under all rota- 
tions; when hitting the surface, the milk drop breaks 
into a crown, which is invariant to only some rota- 
tions. If a ping-pong ball is compressed with a uni- 
form radial force, it will buckle. Buckling will knock 
out some, but not all, of its rotational symmetries 
(see Figure 2b), because it will react to the force to 
rearrange itself to preserve as many of symmetries as 
possible to maintain its stability. Therefore, symme- 
try breaking is relative to symmetry: If the initial 
system is invariant to symmetry X, then after sym- 
metry breaking, the resulting system is invariant to 
symmetry Y, such that Y is smaller than X. 

Symmetry breaking has been recognized as a fun- 
damental process of pattern formation [10]. If the 
force on the ping-pong ball is uniform, buckling will 
produce a symmetric pattern of identical dents on the 
surface of the ball. Thus, the pattern on the surface of 


(b) 


the ball arises from breaking the perfect symmetry on 
the ball. Stewart and Golubitsky [10] relate this phe- 
nomenon to the human perceptual quality that the 
human mind perceives too much symmetry as a bland 
uniformity rather than a striking pattern. Mathemat- 
ically, as they explain, a uniform, featureless plane has 
a vast amount of symmetry; but people do not look at 
a wall painted in a single color and enthuse over its 
wonderful patterns. Similarly, a pond has a great 
amount of symmetry 
on its surface, but we 
are intrigued by the less 
symmetric pattern 
manifested in circular 
ripples on the pond. 
Patterns therefore arise 
from the contrast, the 
imperfection against 
the perfection, such as 
clouds against the blue 
sky, ripples on a fish 
pond, Chinese paper 
cutting, and the blot of 
ink on a paper. In all 
these examples, sym- 
metry provides a 
norm—a_ backdrop— 
against which patterns arise. 

Alexander, whose work on architectural patterns is 
a major influence on software patterns, has said that 
his understanding of patterns is closely related to the 
idea of symmetry breaking [2]. In [5], it is shown that 
software patterns can be explained as a result of break- 
ing the symmetry created by programming languages. 


Figure 2. Symmetry breaking: (a) a 
splash of milk drop has lost its 
spherical symmetries to become a 
crown; (b) a buckled sphere has lost 
some of its rotational symmetries 
(from D’Arcy Thompson, On Growth 
and Form, Cambridge University 
Press, 1972). 


SYMMETRY CREATED BY OBJECT-ORIENTED LANGUAGE 
FEATURES 

Traditional OO design suggests that OO programs 
should be built from many small objects, like Lego 
bricks. This view has been challenged in [9], which 
reported there is no evidence of a typical size of 
objects (Lego bricks) to OO programs, and instead, 
OO programs are built from objects of variable size 
that exhibit scale-free, fractal geometry. The fractal 
geometry of OO programs may have important 
implications for debugging and garbage collection, 
according to [9], as the number of outgoing refer- 
ences of objects can be estimated using a power law; 
it may also help the designers to predict the number 
of objects and their relative sizes required in an OO 
program. Perhaps more important, this new revela- 
tion of OO program structure has reaffirmed the 
idea that software design, like architectural design, is 
essentially geometric. 


This article takes a step further by positing that the 
fractal geometry of OO programs is full of symme- 
tries, because OO programming languages, especially 
class-based languages, such as C++, Eiffel, and Java, 
have a great desire for symmetry enforced by their 
type systems. Since each type enforces some invari- 
ance to its instances, type systems are inherently sym- 
metric. More generally, symmetries in programming 
languages are introduced by language designers in the 
name of design consistency, 
as expressed by Meyer [8]: 
“Throughout the design of a 
class library ... we must con- 
stantly ask ourselves: “How 
do I make my next design 
decision compatible with the 
previous ones?’ “How do I 
take my next design decision 
so that it will be easy—or at 
least possible—to make 
future ones compatible with it?” 

According to Meyer [8], the concern for symmetry 
is a special case of the concern for consistency. This 
article, however, views symmetry as a more funda- 
mental design concept than consistency and that the 
concern for consistency is but a special case of the 
concern for symmetry. Symmetry reigns in language 
design. Class-based languages, for example, exhibit 
class symmetry, behavior symmetry, template symme- 
try, and method symmetry. This article explores and 
reveals these symmetries. 

Class symmetry is associated with classes. Although 
it is clear the class concept is central to class-based lan- 
guages, it is not always clear why the class concept is 
so important. According to Stroustrup [11], the 
importance of classes lies in their organizational 
power, rather than their computational power. He 
says: “C with classes was explicitly designed to allow 
better organization of programs; ‘computation’ was 
considered a problem solved by C [11].” A class spec- 
ifies how a type of object can be constructed. Each 
type of object is invariant under its constructors 
because all the objects of the same type have the same 
configuration under their constructors. Objects of the 
same class can be said to be symmetric to each other 
because they belong to the same type. Classes can be 
viewed as a classification tool that classifies objects 
according to type invariants or type symmetries. 

The Eiffel programming language imposes more 
class symmetries than other class-based languages, to 
the extent that Eiffel classes are too rigid. Every object 
of an Eiffel class is an invariant with respect to a set of 
assertions [8]. Eiffel has a strong connection to 
abstract data types, such that not only every object of 
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a class is symmetric to its type, but also every class is 
intended to be isomorphic to the type. 


ehavior symmetry is linked to subtyp- 

ing relation on object types [1]. An 

object type with more methods is said 

to be a subtype of the one with fewer 

methods. Subtyping is governed by the 

subsumption rule [1], which states that 
if b is an object of type B and B is a subtype of type 
A, b is also an object of type A. A practical use of this 
rule is known as the Liskov Substitution Principle 
(LSP) [7], stated as follows: “If for each object o1 of 
type S there is an object 02 of type T such that for all 
programs P defined in terms of T, the behavior of P is 
unchanged when o1 is substituted for 02, then S is a 
subtype of T.” The importance of the LSP is that it 
places a behavioral constraint on subtypes and ensures 
a subtype object can always be used safely instead of a 
supertype object. Types that conform to a subtyping 
relation form a type family or type hierarchy. Such a 
type hierarchy is homogeneous because all the types 
in the hierarchy are of the same kind, a classic view of 
the “is a kind of” (IS-A) relationship. 

Such a type hierarchy also has two important con- 
sequences. First, its objects have behavior symmetry 
because they behave exactly the same from an exter- 
nal observer's viewpoint and can be substituted one 
for another in terms of the LSP. As long as the LSP is 
not broken, the type hierarchy will be type-safe. Sec- 
ond, its objects have a polymorphic type because they 
can be viewed as belonging to many types of the type 
family. It is worth noting that objects that have class 
symmetry also have behavior symmetry because they 
behave exactly the same, but the reverse applies only 
to the objects belonging to the same type. 

Template symmetry is associated with class tem- 
plates in C++. A class template or generic type speci- 
fies how individual classes can be constructed much 
like the way a class specifies how individual objects 
can be constructed. Class templates are also designed 
for better organization of programs. Classes and class 
templates provide two orthogonal organizations of 
programs, such that classes organize objects into 
types, whereas class templates organize types into 
generic types. Class templates can be viewed as 
higher-level or meta-level type constructors. They are 
similar to meta-schemas in relational databases. All 
the types generated from the same class template have 
the same configuration and are therefore symmetric. 

Class, behavior, and template symmetry can be 
generally referred to as substitution symmetry, as 
objects can be substituted one for another under class 
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and behavior symmetry whereas types can be substi- 
tuted one for another under template symmetry. 
Method symmetry exists in many forms. In the 
first form, method symmetry is related to subclass 
methods. As a direct consequence of the subsumption 
tule, the sound typing rule for method overriding 
requires that the types of arguments of methods 
should vary contravariantly from classes to subclasses, 
and the types of results of methods should vary 
covariantly [1]. Another form of method symmetry is 
operator overloading. In C++, arithmetic operators 
are overloaded in classes to allow objects to behave as 
if they were primitive data values and to be expressed 
as the symmetry of left and right operands. Deeper 
than expressing this reflection symmetry, overloaded 
operators create symmetry of familiarity between 
built-in data types and user-defined types. Experi- 
enced programmers know the importance of method 
symmetry and have introduced many ad hoc symme- 
tries, including complementary method pairs. For 
example, where practical, a creation method may 
match a disposal method; a getter and a setter; and a 
producer and a consumer. In Eiffel, every class 
method is an invariant against its pre/post conditions. 


SYMMETRY BREAKING PRODUCES PATTERNS 

Symmetry plays a major role in design for its aes- 
thetic and functional value. One function of sym- 
metry is its predictability: Symmetry shows us what 
to expect. In OO programs, class symmetry helps 
the compiler predict the behavior of objects, and 
method symmetry helps predict the behavior of 
methods. Another function of symmetry is impos- 
ing design consistency, as described previously. Yet 
perfect symmetry is austere in the extreme. In the 
visual world, our eyes often find a richer aesthetic 
content on partly symmetric reality. In biology and 
physics, the imperfections and irregularities in the 
arrangement of cells are more interesting because 
they pose deeper questions to scientists. 

In program design, too much symmetry can lead 
to inflexible and rigid programs. Language designers 
have long recognized this problem and have intro- 
duced language features to break the rigid design. 
For example, abstract classes and interface features 
are designed to break class symmetry into interface 
and implementation symmetry. When language fea- 
tures are inadequate for breaking symmetry, soft- 
ware designers will invent their own gadgets to do 
the job. Over the years, some of these gadgets have 
survived and become what is now collectively called 
design patterns. 

Design patterns thus viewed, have therefore arisen 


from breaking symmetry in OO programs. Although 


WHILE DESIGN PATTERNS BREAK SYMMETRIES 
ENFORCED BY ORIGINAL LANGUAGE FEATURES, THEY CREATE 
THEIR OWN LOCAL SYMMETRIES, AND IN SO DOING, THEY 
ADD EXTRA FEATURES ON TOP OF LANGUAGES. 


they are now used as solutions for breaking symme- 
try, they were actually the structure configurations 
left by symmetry breaking. Here, some popular class- 
based OO design patterns as in [6] are used as exam- 
ples to illustrate how they break class, behavior, and 
method symmetry (for a formal definition of pattern, 


see [5]). 


lass symmetry can be broken in many 

ways. A straightforward class symme- 

try breaking is using the abstract class 

or interface feature. When a language 

has no interface feature, such as C++, 

patterns, like Handle/Body and Han- 
dle/Body Hierarchy [4] (or Bridge [6]), can be used to 
break class symmetry. Class symmetry breaking plays 
a major role in the formation of the design patterns 
presented in [6], as many of those patterns stem from 
the idea of breaking class symmetry. For example, all 
the Creational Patterns are based on the idea of sepa- 
rating the object-construction process from the con- 
struction interface. 

Why is the separation of a class into an interface 
and an implementation breaking class symmetry? It is 
because a class is broken into two. The original class 
symmetry is now split between the interface (where 
type invariants are found) and the implementation 
class (where implementation invariants are found). 
Since there can be more than one implementation 
class behind an interface, an interface can represent 
many sets of objects, each of which is symmetric to a 
specific implementation class. The original class sym- 
metry is thus broken. 

Breaking class symmetry also breaks object type 


symmetry, as the object type is now transferred to the 
interface. Moving a type away from its objects, to the 
interface breaks the type symmetry of these objects, as 
an object type can now represent more than one set of 
objects. 

Breaking behavior symmetry happens when a type 
hierarchy breaks and objects in the hierarchy cannot 
be substituted one for another. Typical patterns that 
break behavior symmetry are Adapter, Composite, 
and Decorator [6]. 

It is easy to understand that the Adapter pattern 
breaks behavior symmetry because it transforms one 
type of object into another type. Suppose we have a 
list and wish to use it as a set. Since a list is not a set, 
the two cannot replace one another. The only way we 
can use a list for a set is to convert the list into the set. 
The behavior symmetry of the list is broken into that 
of the set. The Adapter pattern captures this conver- 
sion process. 

The Composite pattern breaks a homogeneous 
type hierarchy into a heterogeneous type hierarchy by 
allowing two types of object to cohabit: One type is 
the primitive, and another is the composite of the 
primitive. Although the Composite pattern presents 
the two types of object using a common interface, the 
behavior of the two types is different. One cannot 
substitute a primitive for a composite; one can only 
build a composite using the primitive. 

The Decorator pattern breaks behavior symmetry 
by allowing individual objects to have unrelated behay- 
iors. Decorator also breaks class symmetry, as it assigns 
responsibilities to individual objects, not to an entire 
class. The structure created by Decorator is a hierarchy 
of individual objects with different behaviors, rather 
than a type hierarchy, that has a uniform behavior. 
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Method symmetry is broken when overriding 
methods break the contravariant argument rule. 
Castagna [3] argues convincingly for breaking this 
rule and that covariance and contravariance charac- 
terize two completely distinct mechanisms in that 
the former is for code specialization and the latter is 
for subtyping. He proposes to capture both covariant 
and contravariant arguments in multi-methods. Yet 
since mainstream class-based languages are single- 
dispatch languages, Castagna’s proposal is often only 
partially implemented. For example, Eiffel adopts 
the covariant policy on both argument and result 
types; Java requires that both argument and result 
types vary in unison, either in a covariant way or a 
contravariant way; C++ supports only covariant 
result type and does not care about argument type. 
Patterns, such as Override-Overload Method Pair 
(see www.curbralan.com), are introduced to simulate 
multi-methods in single-dispatch languages to sup- 
port both covariant and contravariant method defin- 
itions. 

There are more method symmetry breakers in [6] 
than there initially appears. For example, Template 
Method breaks method symmetry by separating the 
invariant part (template) of a method from its variant 
part (method steps). The same symmetry-breaking 
footprints can be found in Eiffel’s Loop Invariants 
and other design patterns, such as Visitor, Interpreter, 
and Iterator [6]. Or should it be that all these 
method-breaker patterns are variations of Loop 
Invariants? It does not matter which answer is true or 
most appropriate; the heart of the matter is that 
method symmetry needs to be broken to allow flexi- 
ble and reusable design. Other method breakers are 
Chain of Responsibility and Command [6], which 
break a method into sub-methods, again, to facilitate 
design flexibility. 

Yet, while design patterns break symmetries 
enforced by original language features, they create 
their own local symmetries, and in so doing, they add 
extra features on top of languages. 


he good news is, with judicious use, 
design patterns can provide some 
extra, useful programming utility; the 
bad news is, they can be so easily mis- 
used or, at the best, overused by pat- 
tern enthusiasts. The worst-case 
scenario is there are potentially an infinite number of 
design patterns resulting from the finite number of 
language features, all equally arbitrary; how do we 
know which ones are good and which ones are bad? 
Understanding the relationship between language fea- 
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tures and design patterns in terms of symmetry and 
symmetry breaking may provide he answer to that 
question. 


CONCLUSION 

In natural, as well as artificial systems, symmetry 
reigns supreme. This article has shown that class- 
based OO programming features create symmetries, 
whereas class-based design patterns break them. The 
relationship between language features and design 
patterns, as characterized by a more fundamental 
relationship between symmetries and broken sym- 
metries, suggests a new way of understanding and 
viewing software design. The next time you are 
designing a program, think carefully about which 
symmetries you want to preserve and which ones 
you want to break, and why you want to do so. Ina 
broad stroke, software design is fundamentally 
about making or breaking symmetry. @ 
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COSTS AND BENEFITS 
OF XBRL ADOPTION: 
EARLY EVIDENCE 


Financial reporting via XBRL ts a low-cost method 


fort increasing fransparency ano compliance whtle potentially 


decreasing a firms cost of capttal. 


By Robert Pinsker and Shaomin Li 


The ability to acquire, communicate, 
and disseminate business informa- 
tion is vital for investor and manage- 
ment decision making. Today’s 
growing amount of information and 
diverse formats in reporting business 
and financial data makes collecting 
and publishing it all a major chal- 
lenge for all organizations in all 
countries. Until recently, there was 
no standard format for communicat- 
ing accounting information [8]. As a 
result, organizations had to manually 
assemble it from often-incompatible 
information systems to prepare 
financial reports [7]. 

The Extensible Markup Language 
(XML) was created to provide 


increased data accessibility to large 
numbers of users, especially in Web 
browser format—without having to 
re-key the information. XML and its 
derivatives have become increasingly 
important data formats for storing 
and exchanging business data among 
various systems on the Internet [2]. 
However, using XML to report 
accounting information is difficult 
due to a number of design issues. For 
example, writing an XML schema to 
suit a company’s internal, inter-com- 
pany, or external reporting is a tedious 
job involving a demanding mental 
workload for most systems engineers 
[3]. 

The eXtensible Business Reporting 
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Language (XBRL) is a nonproprietary Web-based 
XML derivative used to tag both financial and nonfi- 
nancial data and give it context (www.xbrl.org). Data 
tags provide information about the facts in the tags. 
The tags map to a data dictionary defined in the 
appropriate taxonomy. XBRL means reuse of data, 
resulting in improved accessibility, interoperability, 
and efficiency, potentially yielding significant time 
and cost savings for the adopting organizations. Addi- 
tionally, XBRL is viewed by many in the accounting 
profession as a way to address recent international leg- 
islation and regulations (such as the Sarbanes-Oxley 
Act of 2002) aimed at corporate 
accountability, financial reporting 
transparency, and earnings man- 
agement [1]. Yet there has been a 


only four companies is a small sample, the study helps 
identify important issues in XBRL adoption and pro- 
vide an opportunity to learn from the experience of 
these early adopters. 


SurRVEY RESULTS 

Three of the four adoptions we studied involved 
publicly traded companies. All four adopted XBRL 
for financial-reporting purposes (as opposed to some 
internal focus). All four contracted a big-four CPA 
firm and software vendor to help with implementa- 
tion issues involving compliance with generally 


Interview Questions 


We are interested in learning your expert opinions on the following three issues: 


paucity of empirical research pro- 
viding insight into XBRL adop- 
tion and implementation. 

Even as XBRL adoption has 
progressed in the U.S. (such as 
the Federal Deposit Insurance 
Corporation's call-report require- 
ment for banks and the Securities 
and Exchange Commission's vol- 
untary filing program), such 
adoptions have affected only a 
small percentage of organizations 
and have occurred at a slower 
pace than in other countries. For 


What was the purpose of your XBRL adoption? 
What factors affected XBRL adoption? 

Who decided on adoption? 

How were the decisions made? 

How difficult do you think the XBRL adoption was for your company? Why do you think this was so? 


_Effect ofthe adoption 
What were the anticipated positive effects of XBRL adoption? 


What are the perceived positive effects of XBRL adoption? 
What are the actual positive effects of XBRL adoption? 


What were the anticipated negative effects of XBRL adoption? 
What are the perceived negative effects/risks of XBRL adoption? 
What are the actual negative effects of XBRL adoption? 


What factors affect the cost of capital? Cost of capital is the incremental cost of raising money through 
debt financing or equity offerings. 

How important is the transparency of your financial information to you? 

How important is the transparency of your financial information to top management? 


example, Chinese and Japanese 

stock exchanges are beginning to 

require member companies to file 

their information in XBRL. For 
regulators, the benefits of increased 
efficiency (through reduced data 
re-entry and increased accessibil- 
ity) are somewhat predictable. However, for compa- 
nies (both public and private) operating in 
environments where XBRL is not required, the actual 
benefits and related costs are less apparent. 

Here, we report the results of interviews (phone 
and email) with four business managers involved in 
XBRL adoption in Canada, Germany, South Africa, 
and the U.S.' Our aim in doing this research is to help 
business executives and financial information man- 
agers better understand the costs and benefits of 
XBRL adoption. The questions (see the table here) 
were created to gather critical information about the 
adoption process, impact of adoption, financial 
results, and any potential transparency of information 
gains as a result of adoption. Although interviewing 


Interview 
questions. 


1We solicited potential interviewees through an XBRL listserve. 
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What do you believe are the positive effects of transparency? 
What do you believe are the negative effects of transparency? 


accepted accounting principles and company-spe- 
cific technical issues. All four can be viewed as “early 
adopters,” given the few completed XBRL adop- 
tions as of early 2005. Finally, all four indicated the 
adoption process was fairly easy while acknowledg- 
ing that a thorough understanding of the XBRL 
framework was needed beforehand and that XBRL 
was not part of their existing enterprise resource 
planning systems. 

Sources for the decision to adopt XBRL ranged 
from the IT department (in the German company) to 
several individuals in top management (the other 
three companies). This finding indicates XBRL adop- 
tion may reflect the diversity of international corpo- 
rate cultures. 

Survey respondents from the three non-U.S. com- 
panies said that both the anticipated adoption bene- 
fits and the actual benefits involved cost savings 
through a variety of sources. For example, one respon- 
dent identified the source of XBRL-related cost sav- 


THE CONTRIBUTION OF 
CRITICAL IS RESEARCH 


By BERND CARSTEN STAHL AND CAROLE BROOKE 


Solving ongoing external problems may 
requtre looking tnwaro first. 


new information system is intro- 
duced to General Medical Practi- 


the administrative burden and 
to help them submit elec- 
tronic claims. The system is 
developed and implemented 
by a central department 
after very limited con- 
sultations with the 
users. It turns out the main benefits 
accrue in the central IS department and 
there are very little benefits for the envis- 
aged users. External suppliers follow the 
requirements analysis of the central 
department and optimize their own out- 
comes. The end users, the GPs in ques- 
tion, grow disillusioned with the system, 
and start to resist it. The system remains 
in place because of the power of the cen- 
tral purchasing authority but never 


tioners (GPs) practice to ease | 


delivers the promised benefits. 

Does this story sound familiar? It may 
be because it has been published (case 3 
in [4]). It may also be because it is very 
typical in many respects. There are the 
common ingredients of system failure: 
lack of communication, lack of user 
involvement, differing agendas, political 
power games, to name just a few. Many 
IT practitioners will be familiar with 
these factors. But the question remains: 
what can be done about such problems? 

Here, we suggest that a suitable and 
novel way of addressing such organiza- 
tional IT problems is the “critical 
approach.” The word “critical” can have a 
variety of meanings when applied to IT. 
Software can be mission critical, which 
means “very important.” Systems analysts 
are supposed to be critical thinkers, sug- 
gesting they should spot logical flaws in 
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Engaging with the critical approach “therefore” means that one must 


question the very values and assumptions that form the basis of one’s activities. 


This ts never easy; indeed for many of ud tt ts next to impossible. \t also requires us 


to take a step back from our day-to-day worries and to rethink our place in life. 


There is no guarantee this will be an enjoyable experience. 


requirements or design. Users can be critical of sys- 
tems, implying they do not approve of them. How- 
ever, in academic texts, the term “critical” (as in 
“critical theory” or “critical social sciences”) has taken 
on a more specific meaning. The critical approach to 
information systems has 
been known to 
researchers for quite a 
while and is generally 
acknowledged as an alter- 
native to “positivism” or 
“interpretivism. ” 

Despite growing atten- 
tion to critical research in 
academic circles, there 
seems to be little corre- 
sponding activity among 
IT practitioners. We 
believe that IT/IS practice could benefit greatly from 
the critical approach. Here, we investigate why little 
practical activity is taking place in the area. We also 
demonstrate why critical research would be beneficial 
for IT professionals and consider how practitioners 
can benefit from critical ideas without falling into the 
dual trap of either trivializing the approach or becom- 
ing lost in its complexities. 


ethical responsibilities? 


Guiding questions of the critical 
approach, 


OBSTACLES TO THE CRITICAL APPROACH 

One of the first problems anyone who wants to do 
critical research or practice in IS will encounter is that 
there is no generally accepted and unequivocal defini- 
tion of the term [3]. However, there are some charac- 
teristics of most critical research that we assume to be 
uncontroversial. The arguably most important prop- 
erty of critical research is that it is based on a critical 
intention to make a difference. Critical research is 
never purely descriptive but wants to change social 
reality. This is based on a deep suspicion that the cur- 
rent state of the world is unjust and disadvantages 
many. Capitalism, while usually not discarded com- 
pletely by critical authors, is nevertheless seen as dys- 
functional in many respects and in need of revision 
and rethinking. A major aim resulting from the criti- 
cal intention is to promote individual empowerment 
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~ Does the technology lead to empowerment of any or al of the stakeholders? 


_ What should my role (as a developer, analyst, manager) be to facilirate 


| Which particular interests are served by the current approach and how ¢: 
ensure a broad understanding of the problem: 


derstand my ethical obligations and do | see a way of discharging my 


and emancipation [5, 8]. Due to the critical intention, 
critical research often centers on topics where the 
injustices of our current world are most visible and 
where critical research can make a difference. Such 
topics not only include the digital divide and gender 
issues, but also questions 
of organizational power or 
the relationship between 
employers and employees. 
This is one reason why the 
critical approach would be 
suitable for a situation like 
the one described in the 
opening remarks. 

This very brief intro- 
duction will have indicated some of the reasons why 
many practitioners may initially be reluctant to 
engage with the critical approach. A central problem 
is that critical research is critical of the very social 
and economic system within which IT and related 
commercial activities are embedded. Engaging with 
the critical approach “therefore” means that one 
must question the very values and assumptions that 
form the basis of one’s activities. This is never easy; 
indeed for many of us it is next to impossible. It also 
requires us to take a step back from our day-to-day 
worries and to rethink our place in life. There is no 
guarantee this will be an enjoyable experience. In 
addition, it can obviously run counter to organiza- 
tional incentives and power structures, which are 
generally geared toward control and not emancipa- 
tion. 

Another problem is the perceived (and sometimes 
real) politics of critical research and its proponents. It 
is linked to the names of theoreticians such as the 
members of the “Frankfurt School” of social science 
(including Marcuse, Horkheimer, Benjamin, Adorno, 
Habermas, and others), and a number of French 
thinkers (including Foucault and Bourdieu to name 
just two). What these authors have in common is they 
have worked intensively with Karl Marx’s writings. 
They are therefore perceived to be on the political left, 
which in management studies, and even more so in 
business practice, is often problematic. 


A final problem with the “application” of critical 
thought to the practice of IT professionals is that it 
does not lend itself to clear and simple algorithms, 
methodologies, or realizations. There is no one way of 
critically engaging with the world. Critical thinking 
requires reflexivity, which means a willingness and 
ability to question oneself and one’s own assumptions. 
Such reflexivity goes beyond a simple deliberation 
concerning the action in question. Reflexivity goes to 
the heart of the individual and requires them to ques- 
tion the basis of their beliefs. It requires self-analysis. 
This is threatening to many, while others dismiss it as 
“navel-gazing.” It promises no economically useful 
outcomes but challenges the critical thinker every step 
along the way. 


ADVANTAGES OF BEING CRITICAL 
Despite the serious obstacles to the critical approach, 
there are a number of advantages to it, which lead us 
to suggest that IT professionals should be aware of it 
and would benefit from using it. We distinguish 
between two groups of benefits: instrumental and 
intrinsic. The term “instrumental benefits” refers to 
such situations where the critical approach can lead 
to tangible organizational benefits, whereas “intrin- 
sic benefits” are those where taking the critical 
approach can simply be described in more ideologi- 
cal terms as being “the right thing to do.” 
Instrumental benefits. The critical viewpoint is an 
inclusive one, which comprises individual, organiza- 
tional, and social issues. It is not possible to distin- 
guish between technical and organizational problems 
or between systems development and systems accep- 
tance. On the one hand, this view thus adds com- 
plexity to the activities of IT professionals, while it 
enriches their understanding. This, in turn, will facil- 
itate a new perspective on problematic issues and an 
enhanced understanding of them. Such a widened 
viewpoint is arguably desirable for IT professionals. It 
is part of conventional wisdom that IT professionals 
have a tendency to privilege the technical and disre- 
gard non-technical aspects of their activities. At the 
same time we know that the percentage of systems 
failures was, and is, large, and that in most cases the 
reason for failure is not technical [11]. Therefore, the 
main argument here is that the critical viewpoint 
allows the IT professional to develop a different per- 
spective, which will help them improve practice. 
Indeed, there are examples of how the use of criti- 
cal thoughts can affect and improve the work of IT 
professionals. One of these is the application of the 
idea of emancipation. Emancipation can be under- 
stood as helping people achieve their potential and 
helping them to be free from alienation and suppres- 


sion [10]. In practice, the emancipatory intention of 
the critical approach means that all individuals 
involved in the design, development, and use of a sys- 
tem or technology need to be able to express their 
viewpoints about it. While this can raise serious prob- 
lems when implemented, it also points the way 
toward participatory methods of the design and use of 
technology. Participatory approaches have the instru- 
mental advantage of maximizing the knowledge base 
of product development and thereby increasing the 
chance of success. 

This line of thought can be extended into risk 
management. The majority of IT/IS risk management 
literature suggests the use of a generic list of project 
risks, which then must be mitigated by the project 
management [12]. This type of risk management cov- 
ers general problems but it is incapable of being sensi- 
tive to the specific context of a given system. This is 
arguably the reason why the generic lists of risk factors 
compiled by different authors do not converge [9]. A 
participative approach as suggested by critical theory 
is capable of overcoming this problem. By incorporat- 
ing the perceptions and knowledge of the majority of 
stakeholders, project risks are likely to be identified 
earlier and more thoroughly. 


inally, empowerment in its differ- 

ent forms can also become a busi- 

ness model for IT professionals. IT 

can be used to enable people to live 

more independent lives. A good 
illustration of such applications would be systems 
used to help disabled people to participate in activities 
of their choice [7], or e-democracy where IT supports 
citizens to act autonomously [6]. 

Intrinsic benefits should be clear enough to per- 
suade IT professionals to at least consider the critical 
approach and weigh the problems of accessing it 
against the possible advantages. However, from the 
point of view of critical research, such instrumental 
reasoning sits somewhat uneasily with the general idea 
of critical research and practice. Using the critical 
approach to promote the goals of commercial organi- 
zations and maximize profit seems to run the danger 
of being self-contradictory. 

There is nevertheless a good reason for using the 
critical approach, even when it does not promise 
instrumental benefits. Critical practice can be seen as 
the right thing to do. To understand this line of rea- 
soning one needs to go back to the fundamental ideas 
of critical thought, with its aims to emancipate indi- 
viduals from disempowering and alienating circum- 
stances. While this is linked to skepticism of 
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capitalism, it goes beyond considerations of the eco- 
nomic system. The wish to emancipate is based on 
the recognition that others are fundamentally equal in 
rights and obligations to us, that there should be 
equality between people and that everybody deserves 
the chance to fulfill their potential. 

This idea is closely linked to ethical reasoning. It 
implies a vision of justice and is closely linked to a 
participatory and democratic form of governance. At 
this stage, it becomes clear that critical research is not 
automatically and inevitably anti-capitalist but only 
aims to address issues where capitalism becomes 
counterproductive. A critical approach can, thus, be 
seen as an expression of ethics and as a necessary crit- 
ical voice where market mechanisms do not live up to 
their promises. 

It is important to realize these fundamental 
thoughts because they allow IT professionals to inter- 


pret critical research as a possible expression of their 
ethical obligations. While there is sometimes a ten- 
dency for individuals working with technology to 
deny or downplay their social and ethical responsibil- 
ity, this cannot be said for recognized IT profession- 
als. For example, ACM expects members to adhere to 
its Code of Ethics and Professional Conduct, which 
clearly states they must take their non-technical 
responsibilities seriously. They are also offered guid- 
ance by professional organizations on how to deal 
with such matters [2]. Critical thought requires 
engagement with serious moral and ethical issues and 
offers the IT professionals an avenue to discharge 
their responsibilities more fully. 


APPLICATIONS OF CRITICAL THOUGHT 
FOR IT PROFESSIONALS 
Having attempted to interest the reader in exploring 


CREATING A SPACE OF MEANING: AN EXAMPLE OF THE CRITICAL APPROACH 


The case of Callco can serve as an example of how the critical approach can help address problems created by the organi- 
zational use of ICT [1]. We will refer to the guiding questions of the table in the article to demonstrate the relevance of the 


critical angle. 


THE CASE: Callco information systems were being applied to automate many of the processes previously carried out by 


individual customer service advisors. The organization had implemented a widescale process of automation, removing 


many people from the data interface. However, they had been forced to reconsider their strategy because of poor external 
customer feedback (issue #1). It appeared that many jobs were being misdirected or being returned to the internal job 
queue further down the line (issue #1). There was little possibility to identify, let alone discharge, ethical responsibilities 
(issue #5). Discussions with management revealed an assumption that technology was a neutral vehicle for transmitting 
facts and it could be used to speed up data processing both geographically and functionally in a largely unproblematic way 
(issue #3). Technology was being applied so as to achieve rational transparency as a means to ensure administrative con- 
trol. 

THE CRITICAL CONTRIBUTION: Taking the critical stance allowed us to take a step back from the day-to-day issues 
of Callco and consider the roots of the problem. This was conceptualized as an issue of space and meaning. In privileging 
progress (that is, time, speed, or efficiency), the space to create meaning had become a blind spot of a technology that 
was both scientific and political in its application (issue #4). This was a crucial problem because shared meaning (for 
example, organizational culture) is necessary for successful collaboration. Such space can be physical space (a room where 
one can meet others and interact), but also intellectual (the possibility of engaging with others and exploring their think- 
ing). The practices at Callco failed to offer a solution to the lack of space for meaning creation, but also rendered the very 
problem invisible. 

It required external pressure (through customers) for management to become open to reconsider their basic assump- 
tions concerning the spatial practices involved in automated systems (issues #1, 3, 4). However, once a space for dialogue 
had been forced upon the organization through a mini-crisis (falling custom and reputation), it created the possibility for 
representational space to be addressed as well (issues #2, 4). Once management acknowledged the need to create intel- 
lectual representational space, they were more willing to revisit the design of systems and procedures (issues #2, 4). 
Enabling the staff to reengage with meaning creation in their data processing activities produced better external customer 
ratings and also increased staff morale (issues #1, 2,5). @ 


REFERENCE 
1. Brooke, C. Information systems in use: A representational perspective. TAMARA J, 3 (2001), 39-52. 


54 March 2008/Vol. 51, No. 3 COMMUNICATIONS OF THE ACM 


and practicing the critical approach, the next ques- 
tion involves how this approach can be realized. The 
answer is likely to be somewhat disappointing to 
technically minded people used to applying algo- 
rithms and methodologies, which lead more or less 
predictably to a solution. There is no generally 
accepted methodology for being critical. 

There are, however, some general guidelines for 
being critical that IT professionals can follow. 
Arguably, the most important is to be reflective; that 
is, the professional must constantly question the 
assumptions and results of their actions. Being critical 
requires one to focus inward first—referred to as 
reflexivity. This includes the attempt to realize what 
one is trying to do and why. In order to achieve this, 
one must take a step back from day-to-day life and the 
issues it brings. Part of this process is to question who 
the stakeholders are and who will be affected by one’s 
action. It also means one must try to ascertain their 
viewpoints and incorporate these in one’s decisions. 


eing critical also requires the abil- 
ity to interpret one’s roles and 
activities in their social context. 
Technology and its intended uses 
are not value-neutral, but are 
based on many explicit and implicit value decisions 
[1]. These must be made as clear as possible and ren- 
dered open to potential revision. The critical 
approach does not offer simple answers but its main 
usefulness allows for asking novel questions. These 
questions allow the practitioner to develop a new 
understanding of problematic situations, which in 
turn is a prerequisite for creative solutions. Some of 
the questions that are typically asked by critical prac- 
titioners are collected in the accompanying table. 

All these steps require effort, resources, and the 
courage to question oneself. It also requires a willing- 
ness to take others seriously, whatever their role in 
relation to the project. Potential stakeholders include 
the traditional commercial ones such as management, 
employees, customers, and suppliers, but they can also 
include local communities, relatives of employees, 
non-governmental organizations, among others. Such 
an approach can be very destabilizing because it forces 
us to face cultures, world views, and realities may not 
be compatible with our own. (See the sidebar “Creat- 
ing a Space of Meaning: An Example of the Critical 
Approach” for a case study illustration of the guiding 
questions noted in the table). 

The critical approach is not an easy option. It is dif- 
ficult to access and difficult to realize. It requires 
engagement of the IT professional that goes beyond a 


narrowly defined understanding of technical responsi- 
bility. This is a significant challenge. However, it can 
also be highly rewarding because it offers new per- 
spectives, can overcome limitations of traditional 
practice, and addresses ethical issues. We do not claim 
that being critical would easily have prevented or 
solved the problem of the GPs (or of the vignette 
included in the accompanying sidebar “Creating a 
Space of Meaning”). We do claim, however, that 
thinking about the questions noted here would help 
to clarify the nature of the problem and thus prepared 
the ground for an innovative solution. Furthermore, 
taking a critical stance will sensitize IT professionals to 
problems and issues on a wider scale and, thereby, 
help limit problems before and when they arise. @ 
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THE ILLUSION OF SECURITY 


A fictional scenarto of daily life in a world networked 
with ambient intelligence tllustrates the dark side of the 
technology ano the need for appropriate safeguards. 


hile most stakeholders paint the promise of 
ambient intelligence (AmI) in sunny colors, there is 
in fact a dark side to Aml. In a way, this dark side 

is inherent in the very nature of AmlI. Intelligent 
networks embedded everywhere will enable data 
aggregators to acquire a lot more personal information, 
far more than in today’s world, greatly magnifying the risk 
of abuse of that data. 


Illustration by John H. Howard 
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ost Aml scenarios illustrate its 

benefits. The dark scenarios, 

developed by the SWAMI (Safe- 

guards in a World of Ambient 

Intelligence)' project, are differ- 
ent as they point out the risks that must be mediated 
if Am] is to be a future success story. 

The scenario we present here hinges on the theft of 
data from a multinational company. The company 
suffers from the illusion of security—that is, the belief 
it has implemented more than adequate security mea- 
sures—only to discover it has not. 


A DarK SCENARIO 

The Data Mining Corporation (DMC) has an 
almost perfect business model. It collects data about 
individuals from hundreds of sources and then sells 
the aggregated data back to many of those sources. 
Its principal sources (and clients) include insurance 
companies, retail chains, media conglomerates, 
credit-reporting agencies, mobile phone companies, 
law enforcement agencies, customs and immigration 
authorities, and intelligence agencies. 

Among the ways DMC has managed to sidestep 
legislative and regulatory constraints on transfers of 
personal data is through mergers with or acquisitions 
of companies with their own extensive databases. 
DMC is headquartered in Miami, but now has major 
subsidiaries in London and Tokyo. It is listed on the 
New York and London Stock Exchanges and is con- 
sidering a listing on the Tokyo Stock Exchange. 

Scene 1: Management board meeting. The company 
secretary stands close to the iris scanner. The door 
opens and he enters the boardroom. The president, 
already there, nods a slight greeting to the company 
secretary who can see his boss is preoccupied. She is 
watching the boardroom video display, which depicts 
her vice presidents coming down the corridor toward 
the boardroom. A few seconds later, the vice presi- 
dents enter one by one and take their seats. 

“Okay, let’s get on with it,” says the president. 
“Show the agenda.” The agenda appears on the large 
wafer-thin video screen on the wall opposite the pres- 
ident. Three items are listed: 


* Data from developing countries. (Switzer) 


¢ Theft of data. (Perrier) 


"For a detailed version of this scenario and for three other dark scenarios, see D. 
Wright, S. Guewirth, M. Friedewald et al., Safeguards in a World of Ambient Intelli- 
gence. Springer, Dordrecht, 2008. The project was funded under the European Com- 
mission’s Sixth Framework Programme. It had five partner organizations, represented 
by the authors. The project aimed at identifying a range of safeguards to the threats 
and vulnerabilities facing privacy, identity, security, trust and inclusiveness from 
ambient intelligence. The views and opinions expressed in this article are those of the 
authors alone and in no way are intended to reflect those of the European Commis- 
sion. 
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* Considerations re: listing on the TSE. 
(Hausmann) 


Kevin Switzer, vice president for operations, speaks. 
“We've had complaints from the Customs and 
Immigration folks about the shortage and reliability 
of our data on people coming into the States. It 
mainly concerns people from developing countries. 
With our profiling technologies, we are able to iden- 
tify anyone who might be a security risk or disposed 
to anti-social behavior. Unfortunately, most devel- 
oping countries have no AmlI networks, which 
makes it impossible to build up the same kind of 
detailed profiles of individuals like we can here in 
the U.S., Europe, or Japan. So the immigration 
authorities have been making threatening noises 
about refusing entry to people from countries with- 
out AmI networks.” Switzer seems concerned, but 
then smiles. “I think we have a golden opportunity 
here. We can set up Am] networks in those countries 
as long as we are the ones to collect and process the 
data. Youd think most countries would jump at the 
chance to have networks put in place at virtually no 
or little cost to them, but some of the countries are 
quibbling with us.” 

“Quibbling?” asks the president, “What do you 
mean?” 

“Quibbling about control of the data. They say if 
we control the data, it’s tantamount to signing their 
sovereignty over to us. But we've been working on a 
deal where we copy for them the data we collect... 
well, some of it, at least. Our intelligence agencies 
would not want us to hand over everything, nor do 
we have to. We can offer the raw data to the develop- 
ing countries, but they won't know if or how we've 
processed the data, especially since we do the process- 
ing here in the U.S. or in the U.K., outside their juris- 
diction. They'll have to settle for what we give them.” 

“Okay, that sounds good to me. Any objections?” 
she asks the others, who remain silent. “No? Okay, 
then, Jacques, it’s your turn. What's the latest on the 
theft at our London office?” 

Perrier, vice president for security, shifts uncom- 
fortably in his chair. “Well, as everyone here knows, 
we have a regular monthly audit of DMCs data pro- 
cessing activity. From the last audit, we discovered 
that there had been a second back-up of data imme- 
diately after the first, but we can’t identity exactly the 
device to which the data was backed up...” 

“But you know who made the second back-up?” 
asks the president. 

“Umm... uh... yes. It seems likely that three of my 
staff were responsible for doing the regular back-ups 
that night. We want to ask them about this second 


back-up, of course, but we haven't been able to con- 
tact them. It seems all three left on holidays a few 
hours after the second back-up was made. They were 
supposed to have returned three days ago, but they 
haven't reported for work and they haven't answered 
our calls.” 

The president is getting angry. “And why don't you 
know where they are? Surely you can track them via 
their location implants. Everybody has to have a loca- 
tion implant. It’s a condition of employment in our 
company, just like any critical infrastructure like 
banks or nuclear power companies.” 

“Yes, but their implants are inoperable. They could 
have been surgically removed,” says Perrier. 

“And what about the sensor networks in their 
homes and cars?” 

“Yes,” says Perrier. “Like other employees, they've 
agreed that we can check their home systems and 
weve done that. There’s obviously nobody in their 
apartments, and their cars have been stationary since 
they left on holidays...” 

“Have you checked the surveillance systems?” asks 
the president. “You can't go anywhere in London 
without being caught by surveillance cameras hun- 
dreds of times a day.” 

“Yes, we've been reviewing the data from the sur- 
veillance systems, too,” says Perrier. “But they haven't 
shown up on those either. We've also checked with the 
airlines and railways and car rental agencies to see 
where they might have gone. Now we know they left 
for Costa Rica, but then the trail goes cold. As Kevin 
has just pointed out, the developing countries don't 
have the kind of Aml infrastructure needed to track 
people, so they could really be anywhere. We've also 
been checking with the 4G companies, but so far, 
there’s been no data recovered on use of their 
mobiles.” 

“I don't understand how they could have got past 
our own security systems,” says the president. “We 
have access control to prevent unauthorized employ- 
ees from copying or manipulation of data.” 

“That’s true,” says Perrier. “The snag is that they 
were authorized. Quite a few employees have partial 
access, so if three or four with access to different bits 
collaborate, as these three appear to have done, they 
are able to get virtually full access to the data.” 

“Even so,” says the president, “how did they get the 
data outside our headquarters?” 

“With today’s technology, it’s easy to copy vast 
amounts of data in seconds onto high-capacity optical 
storage devices no larger than a deck of playing cards, 
which makes them easy to conceal on the way out of 
the building. It’s hard to break into DMC offices, but 


it’s not hard to get out.” 


“If we were exposed, it would be a complete disas- 
ter,” says MacDonald, the VP for public affairs. 
“Among other things, it would show our clients that 
the profiles of our own employees are not reliable 
because we weren't able to predict that these few bad 
apples were going to abscond with copies of our 
records.” 

Max Court, DMC’s general counsel, speaks up. “If 
we were exposed? Are you suggesting we should with- 
hold information about this theft from the police and 
those whose files have been copied?” 

“Of course,” says MacDonald. “It’s obvious, isn’t it? 
I'd hate to imagine what it would do to our share price 
and our plans for a listing on the Tokyo Stock 
Exchange.” 

Scene 2: The Old Bailey, two years later. BBC1 news 
anchor: “And now we go to our reporter, Miles Dav- 
enport, who’s been at the Old Bailey today, attending 
the trial involving the Data Mining Corporation and 
its directors. What’s the latest, Miles? Has the jury 
returned with a verdict?” 

Miles Davenport: “Thanks, Serena. No, the jury 
hasn’t returned yet, but an announcement is expected 
in the next few minutes.” 

BBC presenter: “Miles, can you just recap for our 
viewers what this trial’s been all about? And why is it 
so important?” 

Miles: “Sure, Serena. It all started two years ago 
when The Financial Times broke a story about the 
theft of personal information on about 16 million 
people in the U.S. and the U.K. All this data was held 
by DMC, the world’s largest data miner. DMC dis- 
covered that someone had broken into its supercom- 
puters but it didn’t say anything to anybody.’ Then 
there was a big spike in the number of identity theft 
cases. People were seeing all kinds of purchases on 
their monthly statements for things they hadn't 
bought. A lot more people and companies were 
reporting that they were being blackmailed with 
threats of releases of embarrassing information. The 
FT got wind of this, and was able to trace the source 
back to a theft of data from DMC. 

“At first, DMC denied everything, and then said 
they wouldnt comment on it because the theft was 
under investigation. When its share price began sky- 
diving on Wall Street and in London, DMC had to 
call off plans for a listing on the Tokyo Stock 
Exchange. For awhile, it looked like DMC was going 
bust, but the U.S. government stepped in and 


*DMC is not alone. See J. Krim, “Consumers Not Told Of Security Breaches, Data 
Brokers Admit,” The Washington Post, Apr.14, 2005. See also D. Stout and T. Zeller 
Jr., “Agency Delayed Reporting Theft of Veterans’ Data,” The New York Times, May 
24, 2006. 
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propped up the company. They said that national 
security was involved, and they could not allow the 
company to go bust.” 

BBC presenter: “Personalized services are great, of 
course; they save us lots of time. And so are the 
improvements in our security, like knowing when we 
are near criminals or suicide bombers, but isn’t there 
a dark side?” 

Miles: “Well, yes, there is. We have to trust com- 
panies like DMC to keep our data safe, secure, and 
accurate. But now we know that our data is not 
secure. DMC not only failed to protect our data, they 
were actually selling it to governments who were 
hunting for people with behavioral dysfunctions in 
case they were likely to commit a serious crime or an 
act of terrorism. They've also been selling the data to 
other companies who were using the data to spam 
just about everybody in the U.S. and here in the 
U.K. DMC claimed they couldn't be held responsi- 
ble for what their clients did with the data.” * 

BBC presenter: “Thanks for that recap, Miles, but 
werent there some other issues that came out during 
the trial?” 

Miles: “There certainly were, Serena. People are 
entitled to see their records, but most people didn’t 
even know about DMC, let alone the fact that they 
had built up such extensive records on every one of 
us. So, some consumer activist groups banded 
together to sue DMC for negligence. People had no 
idea just how pervasive ambient intelligence had 
become. We heard that in many instances the data 
coming from so many different ambient technology 
networks was often in conflict or didn’t make any 
sense. DMC countered that its proprietary software 
contains an algorithm for comparing data from dif- 
ferent sources to maximize reliability and its predic- 
tive capability, but under intense questioning from 
the prosecution, they admitted they could never 
eliminate unreliability nor could their predictions of 
who might be a terrorist or criminal be 100% cer- 
tain.” 

BBC presenter: “And the DMC directors, what’s 
going to happen to them?” 

Miles: “We'll find out after the jury comes back 
with the verdict. The DMC president, however, has 
already resigned, but she went out with a golden para- 
chute—a severance package worth a cool $100 mil- 
lion—and now she’s apparently living in Costa Rica.” 


sof, W. Safire, “Goodbye To Privacy,” The New York Times, April 10, 2005: “Of all 


the companies in the security-industrial complex, none is more dominant or acquisi- 


tive than ChoicePoint of Alpharetta, Ga. This data giant collects, stores, analyzes and 
sells literally billions of demographic, marketing and criminal records to police 
departments and government agencies that might otherwise be criticized (or de- 
funded) for building a national identity base to make American citizens prove they are 


who they say they are.” 
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ANALYSIS 


Here, we present a methodological structure for ana- 
lyzing this scenario, which could also be applied to 
the construction and analysis of many technology- 
oriented scenarios. 

Situation. The objective of this scenario is to depict 
what is called the “illusion of security” in an Aml 
world a decade from now, when ambient intelligence 
has become pervasive in developed countries (but not 
developing countries), when most people embrace the 
personalization of services and the supposedly 
enhanced security resulting from the application of 
Aml. Although AmI offers powerful new technolo- 
gies for security applications, such technologies can be 
undermined by determined people. 

This dark scenario is a trend or reference scenario 
because it starts from the present and projects forward 
on the basis of to-be-expected trends and events. It is 
intended to be realistic or descriptive rather than, for 
instance, normative or extreme. 

The scenario concerns the theft of personal infor- 
mation held by a data aggregator (DMC) by three 
rogue employees. Theft of identity occurs now, but 
the difference between such crimes today and in the 
future is the scale of the data involved. AmI will make 
it possible to gather orders of magnitude more infor- 
mation about virtually every person in America, 
Europe, and Japan. The future is also marked by an 
increasing concentration in the control of personal 
data. Thus, the risks to individuals are much greater 
when something goes wrong. 

Aml technologies used in the scenario. The scenario 
makes reference to several Am] or AmlI-related tech- 
nologies, including: 


* Biometrics, such as the iris scanners that grant 
admission to the boardroom; 

Networked sensors/actuators, such as those that 
detect human presence in cars or homes; 

Speech recognition and voice activation, such as 
the system in the boardroom that recognizes a 
command from the president of operations to 
show the agenda; 

Surveillance technologies including video cam- 
eras, keylogging software, location implants, bio- 
metrics, and networked sensors, that are used to 
monitor where employees are and what they are 
doing; 

Intelligent software that can analyze past behavior 
and preferences in order to predict needs and per- 
sonalize services (which TV program to watch, 
which products to buy), something Serena, the 
TV presenter in Scene 2, views as welcome by the 
market; 


¢ Networked RFIDs, sensors, and actuators for 
gathering data about people and the products 
they have or services they use. These and other 
Am technologies greatly facilitate profiling of vir- 
tually everyone; and 

* Fourth-generation mobile phones, which com- 
bine today’s PDA capabilities with third-genera- 
tion mobile technology (and much else). Such 
multimedia personal devices provide a wide range 
of services (and collect vast data), but 4G net- 
works are not available everywhere, especially not 
in developing countries, like Costa Rica, to which 
the data thieves and, later, the DMC president 


decide to decamp. 


Applications. The AmI technologies referenced in 
the scenario are used in various applications, includ- 


ing: 


° Security: DMC has instituted various security 
measures, such as access control (to offices and 
software systems), key logging, proprietary soft- 
ware, employee monitoring and so on, to ensure 
the security of the personal data it collects and 
processes. 

Surveillance: Video cameras and other surveillance 
technologies keep watch on virtually everyone, 
especially in the streets and shops of London (and 
other cities), but increasingly in their homes too. 
Such technologies can be used to detect whether 
someone exceeds the speed limits or pilfers items 
from the shops, but also whether they engage in 
terrorism on the Underground. 

* Immigration control, counterterrorism and policing: 
AmlI networks are used to compile personal data 
and profile would-be visitors and immigrants to 
help officials assess whether they present a secu- 
rity risk or might behave in a socially dysfunc- 
tional way. 

Personalization of services and targeted marketing: 
With the prevalence of AmI networks, and the 
vast amount of personal data they generate, ser- 
vice providers can individuate their services to 
new levels of specificity. 

Critical infrastructure protection: It’s hard to get 
into the DMC offices (but not so hard to get 
out). AmI sensors and actuators, biometrics, and 
other access control measures are used to protect 
critical infrastructure, such as DMC, banks, pub- 
lic utility networks, government offices. 


e 


Drivers. The drivers at work here can largely be 
derived from the motives and needs of the principal 
characters in the scenario and/or economic, political 


or social forces. DMC’s management are primarily 
driven by the profit motive, a desire for scale (such as 
to be the market leader, to swallow or overwhelm 
competitors) and to create a situation where their 
clients are dependent on DMC services and products. 

A second driver must be market demand, that is, 
there are many companies and governmental agencies 
that want the processed data that DMC has been sup- 
plying. 

A third driver, not so dissimilar from the first, is 
that the data thieves are also impelled by the profit 
motive. 

A fourth driver is respect for the law. This is 
(partly) indicated when DMC’s general counsel 
expresses some disbelief at the suggestion that DMC 
should cover up the data theft from both the police 
and those whose files have been copied. In Scene 2, 
respect for and redress through the law is the key dri- 
ver. 

Yet another driver can be identified, such as the 
media's desire for a good story, which has the benefit 
of raising public awareness about the pervasiveness of 
Aml. 

The scenario raises several issues: 

Digital divide. The developed countries have Am] 
networks and the developing countries don't. There is 
a risk that this will lead to discrimination against 
developing countries. Intelligence agencies and immi- 
gration authorities may not admit visitors and emi- 
grants from countries without the AmI networks 
needed to generate detailed profiles and a determina- 
tion as to whether a person could be a security risk. 
The digital divide issue radiates in many directions 
and prompts many questions. Will the quest for per- 
fect security really protect our societies? Recent devel- 
opments suggest we are as much at risk from 
homegrown terrorists as from those in developing 
countries. Also, if immigration is restricted from 
developing countries without AmI networks, won't 
our “developed” societies somehow be impoverished 
because we will lack the views and experiences of 
those who know what it’s like to live on both sides of 
the digital divide? If immigration is restricted, espe- 
cially on the grounds of a lack of AmI-generated data, 
wont we inflame resentment in developing countries? 

Concentration of power. DMC is the clear market 
leader in the aggregation and processing of AmI-gen- 
erated data. It has a wide range of powerful clients. 
When there is a risk that DMC might collapse, the 
government steps in to prop up the company. When 
governments and client industries are so dependent 
on a single market player, they are at risk of being held 
hostage. Even if the company professes respect for the 
law, there is a distinct risk, whatever its declared inten- 
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tions, that it will act in a monopolistic way (“Power 
tends to corrupt.”). High technology companies may 
fly under the radar screen of competition authorities 
for a long time before they are noticed, by which time 
they may have, like DMC, accumulated too much 
power. 


he concentration of power manifests 
itself in other ways in the scenario. 
DMC says it is willing to establish 
AmlI networks in some developing 
countries as long as DMC controls 
them. Developing countries, concerned about their 
sovereignty, will “have to settle for what we give 
them,” says Switzer. Also, employees have “agreed” 
that DMC can check their home sensor networks, 
that is, if they want a job at DMC, they must agree. 
Similarly, employees must bear location implants. 

Lack of public awareness. Despite the convenience 
of personalized services and enhancements in security 
made possible by AmI, most people have not com- 
prehended just how pervasive AmI has become, nor 
of the scale and volume of data being generated about 
them by AmI networks. In the scenario, public aware- 
ness is increased as a result of the investigative report- 
ing and media coverage of the theft of data from 
DMC, the resulting trial, and the high-level political 
intervention to stave off DMC collapse. Aroused 
public awareness may force changes in legislative or 
regulatory oversight. Hence, public awareness and the 
pressure of public opinion, stoked by the media, have 
utility as a safeguard against abuse. Unfortunately, 
such pressure is almost always reactive. 

The illusion of security. Most people are willing to 
trade some of their privacy for better security. The 
scenario suggests that terrorism has become suffi- 
ciently serious that the intelligence agencies and 
immigration authorities are becoming unwilling to 
admit foreigners unless they have detailed informa- 
tion on each individual. Similarly, DMC employees 
seem willing to have location implants and surveil- 
lance equipment installed not only in their offices but 
in their homes and cars. They probably see this as 
beneficial in security terms. 

It is ironic that DMC and its directors face a class 
action lawsuit on the grounds that they were negli- 
gent in securing personal data. Security would seem 
to be one of DMC’ key strengths, one of its key sell- 
ing points. DMC can hardly believe that its many 
security measures—video surveillance, biometrics, 
key-logging software, access control measures, regular 
audits, employee implants and so on—could fail. But 
the question is: have DMC executives done enough? 
Was their profiling of employees sufficiently rigorous 


62 = March 2008/Vol. 51, No. 3 COMMUNICATIONS OF THE ACM 


so that they did not need to fear theft by insiders? We 
are told that it was difficult to get into DMC offices, 
but not difficult to get out. DMC’s security defenses 
seemed primarily aimed at preventing breaches at its 
perimeter. 

The company was rather less focused on the enemy 
within, hence the three employees (who had autho- 
rized access to the data) were able to collaborate, to 
copy the files and exit the premises without being 
challenged. Further, it seems to have been relatively 
easy for them to remove their location implants and 
to disappear without a trace. But the three employee 
data thieves are not the only miscreants at DMC. The 
senior executives also behaved unethically and ille- 
gally by not informing the police and their customers 
about the data theft. 

Hence, we can conclude that an illusion of security 
prevailed at DMC and, perhaps, more widely within 
society as a whole. The illusion is fed by the implicit 
assumption that various AmlI technologies and proce- 
dures will form an adequate defense against miscre- 
ants. Unfortunately, no matter how strong these 
technologies and procedures may be, they may still 
fail, especially against insiders acting in concert (both 
the employees and the executives). 

At the societal level, we may assume that laws and 
regulations will protect us, but this scenario suggests 
that even there we suffer from the illusion of secu- 
rity—it takes a class action suit to bring DMC to jus- 
tice. Market forces that might otherwise punish 
DMC are undermined because government decides 
that DMC cannot go to the wall. DMC has managed 
to acquire so much power—partly through its propri- 
etary technology and partly through its market dom- 
inance—and has come to play so big a role in 
(ironically) national security that government cannot 
allow it to go under. But if DMC was unable to detect 
the security risk posed by three of its own employees, 
isn't the government’s confidence in DMC technol- 
ogy misplaced? 

The illusion of security is also fed by unwarranted 
trust. The issue of trust is not directly raised in this 
scenario, but it is not far away. One would think that 
a data aggregator, processor, and reseller like DMC 
would have some obligation to inform people when- 
ever it sells data to others or takes over another com- 
pany with personal data records. But this has not 
occurred. It seems that DMC clients, the intelligence 
agencies and immigration authorities, are content 
that individuals are not informed about what infor- 
mation DMC has on them, even if the law dictates 
otherwise. 

California and a number of other states have strict 
laws requiring that companies do inform individuals 


when their data has been compromised—but that 
does not mean that they will, Compliance will depend 
as much on corporate culture and, especially, ethics as 
on legal deterrents. Thus, to some extent, even laws 
and regulations can instill an illusion of security. 


CONCLUSION 

The principal conclusion we draw from this arti- 
cle—from the dark scenario and the analysis—is 
that, although we can expect amazing advances in 
the development and deployment of ambient tech- 
nologies, there is a risk that corporate ethics in the 
year 2018 will not be so different from those preva- 
lent in the year 2008, which is to say that some com- 
panies will be good corporate citizens and some 
wont. Similarly, some companies will have rogue 
employees just as they do today who are capable of 
undermining what might be perceived as strong 
security (technologically, procedurally, legally). A 
principal difference between today’s world and that 
depicted for the year 2018 could be that security 
concerns about terrorism and antisocial behavior 
will be such that unless individuals have really 
detailed profiles compiled from data from AmI net- 
works, they may be barred from entering a devel- 
oped country. Also, while people may welcome the 
convenience from personalization of services and the 
ubiquity of surveillance technologies, they may be 
lulled into a false sense of security. 

As mentioned in the introduction to this article, 
there have been few “dark” scenarios put forward by 
Aml experts and aficionados. The SWAMI project 
has taken a deliberately contrarian position with 
regard to scenarios that show the “sunny” side of AmI. 
While the authors are as enthusiastic as anyone about 
the potential of Aml, advances in surveillance tech- 
nologies, biometrics, and fourth-generation mobile 
systems, they believe the AmI community, policy- 
makers, and society must be alert to possible abuses of 
the technology. Constructing scenarios and using an 
analytical structure along the lines as noted in this 
article offer a useful way of stimulating dialogue about 
such possible abuses as well as other technology issues. 

Identifying possible abuses is the first step in devis- 
ing safeguards. Almost certainly, a mix of safeguards 
will be needed—technological, socioeconomic, legal, 
and regulatory and even cultural safeguards can be 
envisaged.’ As a minimum, the SWAMI consortium 
advocates a privacy impact assessment for any projects 


“Spielberg's 2002 film, Minority Report, could be regarded as an example of a cultural 
safeguard. The film depicts a society, in 2054, embedded with Aml technologies, in 
which we hear memorable phrases such as “I’m placing you under arrest for the future 
murder of ...”. For a discussion, see D. Wright's, “Alternative futures: AmI scenarios 
and Minority Report,” Futures 40, (June 2008) 40, 5. 


supported by public funding. Designers of new tech- 
nology should be required to factor in data protection 
in any new Aml architectures and networks. Legisla- 
tion and regulation will probably be necessary, and 
one can predict that will elicit protests from those in 
favor of deregulation and getting the government off 
their backs. So be it. 

If civil liberty advocates have had concerns about 
encroachments upon our privacy in the emerging sur- 
veillance society, they will be positively apoplectic if 
Aml, already being implemented in a somewhat 
piecemeal fashion, becomes as pervasive as its sup- 
porters believe it will. To anticipate this future, rather 
than react to it, appropriate safeguards should be 
agreed and put in place. Now is not too soon to start. 
To that end, the authors hope this article will stimu- 
late interesting discussions and constructive debates 
on the issues it raises, including corporate ethics and 
privacy in the Aml space; surveillance technologies— 
from convenience to a false sense of security; the role 
of horror stories and dark scenarios in ubiquitous 
computing; and the risks resulting from unwarranted 
trust. As Thomas Jefferson said, “The price of free- 
dom is eternal vigilance.” @ 


David WRIGHT (david.wright@trilateralresearch.com) is managing 
partner of Trilateral Research & Consulting LLP, based in London, 
U.K. 

MICHAEL FRIEDEWALD (m.friedewald@isi.fraunhofer.de) is a senior 
scientist and project manager in the Department of Emerging Tech- 
nologies at the Fraunhofer Institute of Systems and Innovation 
Research, Karlsruhe, Germany. 
WIM SCHREURS (wim.schreurs@vub.ac.be) is a researcher at Vrije 
Universiteit Brussel in Brussels, Belgium. 

MICHIEL VERLINDEN (michiel.verlinden@gmail.com) is an attorney 
at the Brussels Bar. 
SERGE GUTWIRTH (serge.gutwirth@vub.ac.be) is a professor of law 
at Vrije Universiteit Brussel in Belgium. 

Yves PUNIE (Yves.Punie@ec.europa.eu) is senior researcher at the 
Institute for Prospective Technological Studies (IPTS) in Seville, Spain. 
The IPTS is part of the European Commission’s Joint Research Centre 
(JRC). 

IOANNIS MAGHIROS (Ioannis. Maghiros@ec.europa.eu) is principal 
IST scientific officer at the IPTS. 

ELENA VILDJIOUNAITE (Elena. Vildjiounaite@vtt.fi) is a researcher 
at the VI'T Technical Research Centre of Finland in Oulu. 

PETTERI ALAHUHTA (Petteri.Alahuhta@vet.fi) is a technology 
manager in the Mobile Interaction Knowledge Centre of VTT 
Technical Research Centre of Finland. 


Permission to make digital or hard copies of all or part of this work for personal or class- 
room use is granted without fee provided that copies are not made or distributed for 
profit or commercial advantage and that copies bear this notice and the full citation on 
the first page. To copy otherwise, to republish, to post on servers or to redistribute to 
lists, requires prior specific permission and/or a fee. 


© 2008 ACM 0001-0782/08/0300 $5.00 


DOI: 10.1145/1325555.1325567 


COMMUNICATIONS OF THE ACM March 2008/Vol. 51, No. 3 63 


The 1st ACM SIGGRAPH Conference and Exhibition in Asia 
www.siggraph.org/asia2008 


‘APH launches 
smiere SIGGRAPH Asia 
in Singapore 


Programs include: 


« Papers 

* Sketches and Posters 

« Courses 

e Art Gallery 

* Computer Animation Festival 
e Educators Program 

« Emerging Technologies 

e Exhibition 


Calling all creative researchers, artists, 
digital innovators and animators! 


This is your opportunity to present your stellar 
work or attend the 1st ACM SIGGRAPH 
conference and Exhibition in Asia. 


Queries? 


Contact Conference and Exhibitions 
Management at asia2008@siggraph.org or 
Tel: +65 6500 6700 


SIGGRAPH 2008 


Conference and Exhibition on Computer Graphics and Interactive Techniques mage 
Singapore 


visitsingapore.com 


By Iris A. Junglas and Richard T. Watson 


COMMUNICATIONS OF THE ACM March 2008/Vol.51,No.3 65 


Even though location-based services (LBS) were 
predicted to become the “killer application” of mobile 
commerce, their dominance has not yet material- 
ized—but is predicted to do so soon. The LBS mar- 
ket size has been predicted to grow exponentially 
from 2006 to 2010. Within this four-year time span, 
for example, Asia LBS market is expected to increase 
from $291.7 million to $447 million [8], Europe’s 
market from $191 million [9] to $622 million [3], 
and the U.S. market from $150 million to $3.1 bil- 
lion [10]. LBS have been available for several years. 
Initially, location determination for mobile phones 


was solely cell-based, and location accuracy was deter- 
mined by the cell size. Whereas cell-based approaches 
do not require modifications to the handset or net- 
work, other localization techniques, such as network- 
based (TOA, E-OTD), handset-based (GPS), or 
hybrid approaches (A-GPS), require modification to 
give increased location accuracy. 

In the U.S., the LBS market seems to be less driven 
by user demand or technology innovations than by 
regulatory agencies. In 1996, the Federal Communi- 
cations Commission (FCC) issued the E911 mandate 
intending to improve emergency responses to wireless 
911 calls by determining a caller’s longitude and lati- 
tude, with final implementation targeted for the end 
of 2005. The stated goal is providing the coordinates 
of an E911 caller: the location accuracy must be 
within 50 to 100 meters for 67% of all calls and 
within 150 to 300 meters for 95% of all calls [2]. At 
present, this level of accuracy can be provided only to 
a limited number of public safety answering points 
(PSAPs). Asa result, U.S. cellular providers were fined 
for not meeting the long-past deadline [6]. However, 
once implemented, the E911 mandate will provide 
the technical foundation for LBS in the U.S. 

In Europe, the European Commission initiated a 
similar pursuit in 2002 by issuing the Directive for 
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Mobile Communication—E112—which represents 
the European equivalent of the U.S. E911. Even 
though legally binding, the European Commission 
has not stated any accuracy requirements or any pol- 
icy regarding the localization technique to be used. In 
2006, seven (out of 25) European countries were 
E112-operational, three had limited scope, and nine 
had initiated implementation and were upgrading 
their existing infrastructure [4]. 

Generally, the slow adoption of LBS has been 
explained primarily by three causes. First, the imple- 
mentation of more accurate localization techniques 

(such as ECOTD, U-TDOA, or A- 
GPS) through providers has taken 
longer and has been more costly 
than expected. Second, the few 
available LBS applications display 
long response times, often too long 
for users to handle. And third, users 
are concerned about privacy issues 
that are an inevitable side effect of 
LBS. Whereas other studies have 
demonstrated the impact of privacy 
concerns on LBS, for our study we 
chose to examine LBS in an envi- 
ronment that was not affected by 
slow response times or imprecise 
localization information. We analyzed LBS in an 
experimental laboratory setting that provided faster 
transmission rates than any currently available cellular 
phone infrastructure and higher localization accuracy 
than mandated by the FCC in its E911 mandate. 


LOCATION-BASED SERVICES 

Location-based services are any service that takes 
into account the geographic location of an entity. 
First, the term “entity” means the object triggering 
location information can be human or non-human. 
A pallet of groceries is, for instance, a non-human 
object that often needs to be tracked for logistical 
purposes. The Germany-based METRO Group, 
after a comprehensive pilot project with suppliers, 
warehouses, and retail stores using various genera- 
tions of RFID to track pallets along the entire 
process chain, recently completed its rollout to 180 
locations [5]. 

Second, there are always at least two entities 
involved in a location-based service request—just 
like there are at least two people in a phone conver- 
sation. In a generic geographic grid (such as longi- 
tude and latitude), entity A is always in relative 
position to entity B. Moreover, each of the entities 
can be either static or moving. Static can imply two 
things: either they are truly static (such as retailers) or 


they are only temporarily static (such as a parked car). 

Third, one of the entities, whether human or non- 
human, is always the object of LBS, that is, it is the 
entity about which location information is recorded. 
And fourth, one of the entities is always a recipient of 
the location information. LBS researchers distinguish 
between location-tracking services 
and position-aware services [1]. 
Location-tracking services provide 
information about a user’s where- 
abouts to entities other than the 
user, while location-aware services 
supply the user (the information 
requester) with personal location 
data. In the case of location-aware 
services, the location-information- 
causing entity is the recipient, 
whereas for location-tracking ser- 
vices, an external third party 
requests and receives location 
information about another entity. 
A car navigation system is a loca- 
tion-aware service. Here, location 
information is provided to the 
requester (the driver) who, in 
return, receives real-time naviga- 
tional services. Other examples of 
location-aware services include 
location-sensitive billing (paying 
while passing toll stations), and 
location-specific store advertise- 
ments sent to a consumer’s mobile 
phone when the person is in proximity. An example of 
location-tracking services is UPS's truck-tracking sys- 
tem, where location information for each truck is used 
to increase fleet management efficiency. 
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Figure 1. Usefulness 
and ease of use 
perceptions toward 
differing tasks. 


The distinction between location- 
tracking and location-aware is important—not only 
from a technological viewpoint but also for other rea- 
sons. Whereas location-tracking services focus on par- 
ticular coordinates, location-aware services go a step 
beyond: they also include the coordinates of the sur- 
rounding context and are expected to provide a better 
socio-technical fit. Thus, consumers may have different 
perceptions associated with each service and may find 
one form of service more attractive than the other or 
may simply detect that one form of service contributes 
more to their individual efficiency and effectiveness 
than the other. To examine these questions, we con- 
ducted an empirical study of the potential differences 
between location-tracking and location-aware applica- 
tions. We were particularly interested in differences in 
performance and in perceptions of usefulness and ease 


of use. In addition, we also examined “traditional” 
(non-location) services, such as browsing the Web for 
information and writing/sending email, to provide a 
foundation for comparison. For meticulously singling 
out effects between location-tracking and location- 
aware services, a laboratory experiment has the advan- 
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Task: Simple task wi 
such as “Search for 
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tage of achieving control over disturbing (or external) 
effects that allows for examining efficiency and effec- 
tiveness gains of LBS in the most accurate way. 


AN Empirical StuDy 

The experiment involved 58 subjects, of whom 
36.2% were female and 63.8% male. The majority 
of subjects was between 19 and 23 years old (93.2%) 
and had either moderate or intensive experience 
(> 93.1%) with at least one of three technologies: 
Internet, computers, and cellular phones. Every sub- 
ject was equipped with a wireless PDA and ran- 
domly assigned to one of two experimental groups: 
one had location-tracking and location-aware func- 
tionalities, while the other did not and was provided 
only with wireless connectivity. 

The “wireless” experimental zone spanned two 
buildings and a courtyard in between, totaling 80,525 
square feet (7,481m’). Within this zone, wireless 
Internet accessibility at a transmission rate of 1 1Mbps 
was supported (using WiFi 802.11a). The level of 
localization accuracy at any point throughout the net- 
work averaged between 10 and 20 meters using cell- 
based localization techniques. 

Every subject was given the same set of three tasks: 
location-tracking (find a moving person); location- 
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sensitive (find the closest office that is currently 
open); and those that did not have a location compo- 
nent inherent to them (such as checking for weather 
information, writing an email message)—all embed- 
ded in an encompassing scenario. 

We measured performance, usefulness, and ease- 
of-use perceptions associated with the tasks. For 
example, we expected that individuals would perceive 
a technology with wireless and localization capability 
as more useful for finding a moving person than a 
technology with wireless capability only. In the same 
vein, we anticipated some tasks, such as checking 
weather information, were independent of the avail- 


ability of LBS. Every sub- 


ject underwent a 
30-minute training ses- 
sion prior to usage. All 


received their first task 
(out of three different 
types of tasks) via email 
after some randomized 
amount of time. In order 
to avoid grouping and 
learning effects, task order 
and the time between issu- 
ing tasks were random- 
ized. After every task 
fulfillment, subjects were 
asked to rate their percep- 
tions of usefulness and 
ease of use. Overall, each 
subject spent approxi- 
mately three hours partici- 
pating in the study. 

Task performance—the 
time it took for the subjects 
to complete a task—was 
measured automatically by 
the system. Because location-tracking and location- 
aware tasks stipulate that at least one of the participat- 
ing entities is moving, the system also recorded 
geographic information. For example, a task that 
required a subject to find a moving person recorded not 
only location measures of the subjects at event time but 
also location measures of the (moving) person to be 
found. This was necessary in order to adjust time mea- 
sures based on a subject’s distance in relation to another 
person or place when executing the task. Adjustments 
were operationalized by calculating the velocity (the dis- 
tance-time ratio) of the solution. 

Four interesting outcomes were observed (see Fig- 
ures 1 and 2). First, location-tracking capabilities dis- 
played a high level of perceived usefulness and ease of 
use, along with an increased level of performance that 
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Figure 2. Task performance 
of differing tasks. 
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Time (in seconds) 


ipabi ity but not with LBS 


was significantly different (p < 0.05) from their con- 
trol counterparts equipped only with wireless capabil- 
ity. We observed that subjects were surprised by the 
possibility of supporting a traditional “seek” task with 
the help of information technology. Having a person's 
location information available with the press of a but- 
ton was an overwhelming experience—as confirmed 
by some informal interviews conducted after the 
study. It typically took subjects one “round” of loca- 
tion tasks to understand the depth of the application 
and that the wireless system was tracking their geo- 
graphic whereabouts throughout the experimental 
zone. Subjects expressed both enthusiasm and con- 
cern. They were fascinated 
by the technical possibili- 
ties and alarmed by the 
prospect of someone track- 
ing their movements. 

Second, with regard to 
location-aware Services, 
subjects also said they were 
convinced of their useful- 
ness—more so than the cor- 
responding control group 
(see Figure 1). Though the 
interfaces for both location- 
tracking and location-aware 
functionalities were very 
similar, subjects equipped 
with location-aware capa- 
bilities did not report a sig- 
nificant higher level of ease 
of use (see Figure 1). Inter- 
estingly, subjects equipped 
with location-aware ser- 
vices did not perform significantly better than those 
without (see Figure 2). A possible explanation for this 
finding may lie in the experimental setup, more 
specifically in the geographical arrangements of the 
offices. Because of the size of the experimental cell, 
offices were not far apart from each other. Thus, the 
likelihood of subjects finding an open office (the task 
at hand) was not sufficiently different between LBS- 
assisted and unassisted searching. 

Third, for simple tasks (those that did not contain 
a location component), perceptions of usefulness and 
ease of use did not expose any statistical difference 
(see Figure 1). The same was true for performance 
measures (see Figure 2, bottom). Here, subjects per- 
formed the same, irrespective of whether or not LBS 
were available. These outcomes were to be expected, 
as the sole reason for including simple tasks into our 
study was to provide a cross-check instrument for 
comparison purposes. 


Task: Location- 


tracking task, such as 
“Find person X” 
Task: Location-aware 
task, such as “Find the 
closest X currently - 


oo . 


open’ 


Task: Simple task 
with no location 
component, such as 
“Search for 
information X” 


Overall, and as a final finding, subjects (with or 
without LBS) were highly motivated to partake in the 
experiment (even though it took more than three 
hours to complete). Throughout the study, the level of 
enjoyment among participants remained high to 
extremely high (88%), which indicates people were 
very interested in using a technology innovation pro- 


viding LBS. 


CONCLUSION 

The localization factor has always been mentioned as 
one of the fundamental factors that differentiates m- 
commerce from e-commerce. However, until now, 
this prophecy has materialized only in Asia, in mar- 
kets such as Japan and South Korea. In Europe, cell- 
based LBS have been around for some time, however, 
even for those services consumers are reluctant to pay 
more than for a text message [11]. More accurate 
localization techniques are only selectively available, as 
they not only require tremendous network invest- 
ments but also a Pan-European strategy among oper- 
ators. Therefore, an uptake of LBS is expected to 
become visible with the introduction of Galileo in 
2008—the European equivalent of the U.S. GPS sys- 
tem. In the U.S., equivalent growth is expected to 
materialize with the completion of E911 implementa- 
tion, with a revised deadline for full compliance of 
2012 [6]. Among the U.S. cellular phone providers, 
only Sprint Nextel, considered to be the first mover in 
the LBS market [7], offers audible and visual navigation 
and mapping services to its customers (location-aware). 
On the business-application side, it offers viewing and 
monitoring of employee locations in real time on a 
zoomable online map (location-tracking). 

We examined LBS in a laboratory setting that was 
not affected by slow response times or imprecise local- 
ization information. Removing real-world technical 
problems allowed us to focus on the pure effects of LBS 
on users’ perceptions, as well as efficiency gains. Segre- 
gating between location-tracking and location-aware 
services demonstrated that differences do indeed exist 
between them. Location-tracking capabilities make an 
individual’s life easier by being more useful, easier to 
use, and generating higher efficiency. Location-aware 
capabilities, on the other hand, seem not as valuable. 
Even though efficiency effects were observable, they 
turned out to be not significant. Nevertheless, subjects 
were highly intrigued by LBS capabilities, and the 
experiment left them with a formative impression. 
Along with enthusiasm, however, privacy concerns 
immediately followed, and individuals realized services 
that support navigational help can also be used to gain 
information about the navigator’s whereabouts. More 
specifically, and from observation during the study, one 


would expect that people are willing to provide their 
location information to providers, but are hesitant to 
provide the same information to another entity. As this 
was not the focus of our study, we refer to preliminary 
findings of another of our studies, which shows con- 
sumers are inclined to forgo privacy if they consider the 
resulting services received sufficiently useful. The E911 
emergency service is an instance of where the value of 
the service should override privacy concerns. For many 
services, however, where the individual benefit is not as 
apparent (for example, promotional offers from stores 
in the vicinity), consumers have a strong tendency to 
reject location-aware services. As a consequence, pri- 
vacy considerations, besides efficiency gains and attitu- 
dinal perceptions, are likely to be a major determinant 


in the success of LBS. @ 
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By Robert LaRose, Nora J. Rifon, and Richard Enbody 


PROMOTING PERSONAL 
RESPONSIBILITY for 
INTERNET SAFETY 


Online safety ts everyones responstbhility —a concept much 
easter to preach than to practice. 


OW Can we encourage Internet users to assume 

more responsibility for protecting themselves online? 

Four-fifths of all home computers lack one or more 

core protections against virus, hacker, and spyware 

threats [6], while security threats in the workplace are 

shifting to the desktop [7], making user education 

interventions a priority for IT security professionals. So, it is log- 
ical to make users the first line of defense [10, 12]. But how? 

Here, we present a framework to motivate safe online behavior 

that interprets prior research and uses it to evaluate some of the 

current nonprofit online safety education efforts. We will also 

describe some of our own (Safety) findings [4] from a research 

project funded by the National Science Foundation (see Table 1). 
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THREAT APPRAISAL: THE FEAR FACTOR 

The most obvious safety message is fear. This strat- 
egy is found at all online safety sites in Table 1. 
Sometimes it works. Among students enrolled in 
business and computer science courses, awareness of 
the dangers of spyware was a direct predictor of 
intentions to take protective measures [2]. 

More formally, threat appraisal is the process by 
which users assess threats toward 
themselves, including the severity 
of the threats and one’s suscepti- 


Staysafeonline 
bility to them. Examples of these sare 
and the other user education 


: ‘CyberAngels 
strategies found here, along with ——_Cybers 
the names of related variables 
found in prior research and 
empirical evidence supporting 
them, are shown in Table 2. The 
subheadings in the table are orga- 
nized around the headings in this 
article and reflect key concepts in 
Protection Motivation Theory 
(threat appraisal, coping 
appraisal, rewards and costs), the 
Elaboration Likelihood Model 
(involvement), and Social Cognitive Theory (self-reg- 
ulation). The interested reader will find an overview 
of these theories in [1]. 


—Us-Cert 


i-Safety 


Table 1. Online safety 
user education sites. 


t is unfortunate that communication about 
risk is surprisingly, well, risky. It often fails to 
motivate safe behavior or has weak effects. 
And there can be “boomerang effects,” 
named for the shape of the nonlinear rela- 
tionships sometimes found between. safe 
behavior and fear [8, 11]. Moderate amounts 
of fear encourage safe behavior. Low amounts of fear 
diminish safety, because the threat is not seen as 
important enough to address. However, intense fear 
can also inhibit safe behavior, perhaps because people 
suppress their fear rather than cope with the danger. 
In our own research involving students from social 
science courses (who were probably not as knowl- 
edgeable as students depicted in [2], but perhaps 
closer to typical users), we found a boomerang point- 
ing in the opposite direction. Moderate levels of threat 
susceptibility were the least related to safe behaviors 
like updating security patches and scanning for spy- 
ware, while users with both high and low levels of per- 
ceived threat were more likely to act safely. The point 
is, without knowing the level of risk perceived by each 
individual, threatening messages have the potential to 
discourage safe behavior. 
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COPING APPRAISAL: BUILDING CONFIDENCE 

Users also evaluate their ability to respond to threats 
by performing a coping appraisal. Building self-effi- 
cacy, or confidence in one’s abilities and in the safety 
measures used, is perhaps the most effective educa- 
tion strategy. Self-efficacy is the belief in one’s own 
ability to carry out an action in pursuit of a valued 
goal, such as online safety. Perceived behavioral con- 
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National Cyber Security Alliance www.cybersmart.org 

Parry Aftab, The Privacy Lawyer™ www wiredsafety.org 
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U.K. Government itsafe.gov.uk 

Federal Trade Commission www.ftc.govlinfosecurity S 


Homeland Security Www.us-cert.gov 


“Michigan State University www.msu.edu/~isafety 


trol is a related concept that builds on the notions of 
controllability and perceived ease of use to predict 
intentions to enact safety protections [2]. Self-effi- 
cacy is distinguishable from “actual” skill levels in 
that we may feel confident tackling situations we 
have not encountered before and, conversely, may 
not feel confident enacting behavior we mastered 
only during a visit from the IT person months ago. 

Beliefs about the efficacy of safety measures are 
also important. It’s called response efficacy in the pre- 
sent framework although others have identified it as 
the relative advantage of online protections [5]. Our 
confidence in our computer’s capability to handle 
advanced protective measures (computing capacity in 
[5]) is another response efficacy issue. Self-efficacy 
and response efficacy have the most consistent impact 
on safe behavior across many safety issues, and we [4] 
and others [2, 5] have verified their importance in the 
online safety domain. 

Efficacy has a direct impact on safe behavior, but 
also interacts with risk perceptions. Fear is most likely 
to work if the threat information is coupled with 
information about how to cope with them, since the 
coping information raises self-efficacy. When mes- 
sages arouse fears but don’t offer a rational means for 
dealing with the fear, people are likely to deny the 
danger exists or is unlikely to affect them [11]. In 
Internet terms, that defines the “newbie.” 

Not all user education sites include self-efficacy 
messages; some that do set unrealistic expectations: 
“You can easily keep yourself safe if you just perform 
these two dozen simple network security tasks daily.” 
Still, persuasion attempts are a proven approach to 


Emphasize Threat 


Nearly all computer systems are susceptible to 
Susceptibility viruses, Trojan horses, and worms if they are 
connected to the Internet (Staysafeonline) 
Emphasize Threat You could lose important personal information 
Severity or software that’s stored on your hard drive 
(Consumer Information Security) 
Coping Appraisal 
Build Self Efficacy Install firewalls for your family—it is not difficult. 
(Cybersmart) 
Build Response By having a firewall on guard, coupled with 
Efficacy up-to-date AVS, this can repel the vast oe 
of attacks from the outside. (oe) _ / 
Rewards/Costs : 
Downplay Rewards So what if you have to reregister every time Ne 
of Unsafe Behavior you visit a Web site? What do you get out of — 


personalization anyway? 
(i-Safety) 


Minimize Costs of Safety protections are easy to use and take 


Safe Behavior only moments each day. (i-Safety) 

Highlight Benefits You will find that a safe computer will run 

of Safe Behavior better and cost you less money and effort in 
the long run (i-Safety) 

Involvement 

Make Safety Keeping your computer safe is the key to 

Relevant maintaining your privacy (i-Safety) 

Self Regulation 

Activate Social A mentor is a student who has received the 

Norms valuable Internet safety information that i-SAFE — 


offers, and teams up with other students (i-SAFE) — 


Stress Responsibility A call to action: be a cyber secure citizen! 


(Staysafeonline) 


Build Good Habits Update your protections at the same time 


each week (i-Safety) 


building self-efficacy, anxiety reduction is another, but 
both can backfire if safety measures are complex, are 
perceived to be ineffective, or have the possibility of 
making matters worse. The most effective approach is 
to help users master more difficult self-protection 
tasks. 

Mismatches among threat perceptions, self-effi- 
cacy, and response efficacy could explain why so many 
users fail to enact simple spyware protections [2, 9] 
and also the inconsistent findings of previous research. 
Some may not perceive the seriousness of the threat, 
novice users (such as those surveyed in [9]) may not 
have the self-efficacy required to download software 


Threat susceptibility [1] 
Awareness [1,2] 


Threat severity [1] 


Self-efficacy [1, 2,4] 
Controllability [2] ease of use [2] 
Perceived behavioral control [1,2] 
Response efficacy [1,4] 


Perceived usefulness [2] 
: Relative advantage [5] 


Perceived ease of use [2] 


_ Attitude toward behavior [!, 2] 


Image [1,5] Visibility [5] 
Trialability [5] 


Involvement [This article] 


| Perceived social norm [1,2] 


Personal responsibility [4] 
_ Moral compatibility [1,5] 


Habit strength [4] 


“solutions,” while others may 
doubt the effectiveness of the pro- 
tection. In a sample comprised 
mainly of industry professionals 
[5], a self-efficacy variable (per- 
ceived ease of use) did not predict 
intentions to enact spyware protec- 
tions, but perceptions of response 
efficacy (relative advantage) did. 
Possibly the industry professionals 
had uniformly high levels of self- 
efficacy but divergent views on the 
effectiveness of spyware protections 
so only the latter was important. 


REWARDS AND Costs: THE Pros 
AND CONS OF SAFETY 

Users perform a mental calculus of 
the rewards and costs associated 
with both safe and unsafe behav- 
ior. The advantages of safe behav- 
ior are not always self-evident and 
there are negative outcomes (the 
cons) associated with safe behav- 
ior. Safety takes the time and 
expense to obtain protective soft- 
ware and keep it updated. The 
negatives must be countered so 
that fearful users don't invoke 
them as rationalizations for doing 
nothing. We can also encourage 
safety by disparaging the rewards 
of unsafe behavior, such as those 
touted by parties who make 
unscrupulous promises if we just 
“click here.” 

Another tactic is to stress the positive outcomes of 
good, that is, safe behavior. Eliminating malware is in 
itself a positive outcome, but the secondary personal 
benefits of more efficient computer operation, reduced 
repairs, and increased productivity also deserve atten- 
tion. In one study [5] a status outcome, enhancing one’s 
self-image as a technical or moral leader, was an impor- 
tant predictor of safe behavior. The ability to observe the 
successful safety behavior of others (visibility in [5] ) or 


Table 2. Framework 
for motivational user 
education strategies. 


USERS PERFORM A MENTAL CALCULUS OF THE REWARDS AND 
COSTS ASSOCIATED with both safe and unsafe behavior. 
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to observe them on a trial basis for ourselves (trialability 


[5]) also encourages safety. 


INVOLVEMENT: CENTRAL OR PERIPHERAL 
PERSUASION? 
When users are deeply 
involved in the subject of 
online safety they are 
likely to carefully con- 
sider all of the pluses and 
minuses of arguments 
made for and against 
online safety practices. 
Personal relevance is an 
indicator of involvement. 
In the research we will 
describe, 44% of the par- 
ticipants said that online 
safety was highly relevant, 
but the other 56% had 
lower levels of involve- 
ment. However, many 
users (11% of our sam- 
ple) did not find online safety relevant at all. 
Although safety involvement was related to self-effi- 
cacy (a significant positive correlation of 0.25) and 
to response efficacy (0.4 correlation), involvement is 
conceptually and empirically distinct from both. 
Involvement matters. Along with our ability to 
process information free from distraction or confu- 
sion, involvement determines the types of arguments 
likely to succeed. Here, we argue that even minor 
deficiencies in involvement make a difference in 
response to online safety education. When involve- 
ment or our ability to process information is low, 
individuals are likely to take mental shortcuts (heuris- 
tics), such as relying on the credibility of a Web site 
rather than reading its privacy policy. That is when 
the boomerang effects we mentioned earlier can hap- 
pen. The fear shuts down rational thinking about the 
threat to the point that users may deny the impor- 
tance of the threat and choose unsafe actions [11]. 
When involvement is high users are likely to elabo- 
rate: They are likely to think arguments through, pro- 
vided they are presented with clear information and 
are not distracted from reflection. This is known as 
the Elaboration Likelihood Model (ELM) [8]. 
“Phishcatchers” exploit ELM. The fear-inducing 
news that one’s account has been compromised can 
overwhelm careful thinking even among the highly 
safety conscious. Spoofed URLs and trusted logos 
provide peripheral cues that convince users to “just 
click here,” an action that requires little or no self-effi- 
cacy and, they promise, will be an entirely effective 


Update virus protection’* 

Scan with a hijack eraser* 

Scan with anti-spyware* 

Update operating system patches** 
Erase cookies : 

Use a spam filter** 

Use a pop-up blocker** 

Use a firewall** 

Update browser patches** 


Table 3. Personal responsibility 
and online safety precautions. 
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In the next month | am likely to... 


Basis: An online survey administered to 566 undergraduate students in November 2004. All 
differences are statistically significant based on chi-square analyses (* p < 0.05; ** p < 0.001) 


response. IT professionals tacitly enlist the peripheral 
processing route of ELM when they broadcast dire 
warnings about current network security threats 
through trusted email addresses. 

However, what if the message from the IT depart- 
ment is itself a spoof? 
How can threats that 
attack individual desktops 
and escape the notice of 
network security profes- 
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SELF-REGULATION: TAKING 
RESPONSIBILITY 

Behavioral theories change as unexpected new prob- 
lems are encountered. A news story about our proj- 
ect prompted a letter criticizing “the professors” for 
assuming that online safety was the user’s problem. 
This led us to uncover the role of personal responsi- 
bility. There is evidence that collective moral respon- 
sibility encourages safe online behavior [5], but not 
personal responsibility. Indeed, personal responsibil- 
ity is theoretically an indicator of involvement [8], 
but we found the two were weakly correlated (r = 
0.20), and so a different conceptual approach was 
required. We realized that personal responsibility is 
a form of self-regulation in Social Cognitive theory: 
Users act safely when personal standards of respon- 
sibility instruct them to. 


n our surveys those who agree that “online 
safety is my personal responsibility” are sig- 
nificantly more likely to protect themselves 
than those who do not agree (Table 3). The 
likelihood of taking many commonly recom- 
mended safety measures is related to feeling 
personally responsible, with large “responsi- 
bility gaps” noted for perhaps the most daunting 
safety measure, firewall protection, and also the easi- 
est, erasing cookies. However, surveys alone cannot 
establish the direction of causation. It could be that 
personal responsibility is a post hoc rationalization 
after users acquire self-efficacy and safe surfing habits, 
and does not itself cause safe behavior. 
So, we investigated personal responsibility in a 
controlled experiment involving 206 college students 
from an introductory mass communication class. We 


split the group into high- and low-efficacy conditions 
at the median value of a multi-item index. We con- 
trolled for involvement based on responses to a multi- 
item index also included in the pretest. As we noted 
earlier, about half our sample was highly involved 
(that is, stated that online safety was highly relevant), 
so splitting the group at the median separated the 
“safety fanatics” from the rest. This resulted in four 
groups: High involvement/high self- efficacy (n= 41), 
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tions. After controlling for pretest scores, the personal 
responsibility treatment caused increases in online 
safety intentions in all conditions except one: Those 
with low self-efficacy and low safety involvement had 
lower safety intentions when told that safety was their 
personal responsibility than when they were told it 
was not (the lower line on the graph to the right). 
Thus, those who are not highly involved in online 
safety and who are not confident they can protect 
themselves—a description likely to 
fit many newer Internet users— 
were evidently discouraged to learn 
that safety was their responsibility. 
The positive effect of the personal 
responsibility manipulation was 
greatest in the high involvement, 
high self-efficacy condition and 
high involvement users (the left- 
hand graph) exhibited more pro- 


i bili ibi I ibility sibili G : : 
ony, arene ee i eee tective behavior than users with 
Treatment _ Treatment less involvement (the right-hand 
High Self-Efficacy Low Self-Efficacy graph) fs 
Note: Overall F(8,197) = 23.9, p < 0.001. Treatment x Involvement x Self-efficacy F(7,197) = 2.69, p < 0.02. For the dependent When safety maintenance 


variable 


Prevention Intentions (mean = 4.13, standard deviation = 1.39, range = |—7),an eight-item additive index of prevention intentions 


assessed on a 7-point scale, with total scores divided by 8. 


low involvement/low self-efficacy (n=38), high 
involvement/low self efficacy (n=64), and low 
involvement/high self-efficacy (n=63) 

Prior to taking the posttest, half the respondents in 
each of the four groups were randomlly selected to visit 
a Web page with online safety tips from Consumer 
Reports, with the heading “Online Safety is Everyone’s 
Job!” and a brief paragraph arguing that it was the 
readers’ responsibility to protect themselves. That was 
the personal responsibility treatment condition. The 
other half of the sample was randomly assigned to a 
Web page headed “Online Safety isn’t My Job!” and 
arguing that online protection was somebody else’s 
job, not the reader’s. That was the irresponsibility 
treatment. 

The results are shown in the accompanying figure. 
The vertical axes indicate average scores on an eight- 
item index of preventive safety behaviors, such as 
intentions to read privacy policies before downloading 
software and restricting instant messenger connec- 


behaviors (for example, updating 
virus and anti-spyware protec- 
tions) were examined, the pattern 
for the low safety involvement 
group reversed. There, the argu- 
ment about personal responsibility 
caused those with high self-efficacy 
to be /ess likely to engage in routine maintenance than 
the argument against personal responsibility. We spec- 
ulate that those who are confident but not highly 
involved in online safety reacted by resolving to fix the 
problems after the fact rather than incur the burden of 
regular maintenance. The other groups had the 
expected improvements in safety maintenance inten- 
tions with the personal responsibility message. How- 
ever, there was very little difference between 
treatments for the low involvement/low self-efficacy 
group perhaps because they felt unable to carry out 
basic maintenance tasks. 

Thus, it is possible to improve safety behavior by 
emphasizing the user’s personal responsibility. How- 
ever, the strategy can backfire when addressed to those 
who are perhaps most vulnerable; namely, those who 


Experimental results 
for safety prevention 
intentions. 


WE SPECULATE THAT THOSE WHO ARE CONFIDENT BUT NOT HIGHLY 
INVOLVED IN ONLINE SAFETY REACTED BY resolving to fix the problems after 
the fact RATHER THAN INCUR THE BURDEN OF REGULAR MAINTENANCE. 
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are uninterested in safety and who lack the self-confi- 
dence to implement protection. The personal respon- 
sibility message can also backfire when directed to 
bold (or perhaps, foolhardy) users, those who think 
they can recover from security breaches but who are 
not involved enough to apply routine maintenance. 

In the present research safety involvement was a 
measured variable rather than a manipulated one. 
However, safety involvement might also be manipu- 
lated by linking it to a more personally relevant issue, 
privacy. This is substantiated by the high correlation 
(0.72) we found between privacy and safety involve- 
ment. Privacy is often conceived as a social policy or 
information management issue [3], but safety threats 
affect privacy, too, by releasing personal information 
or by producing unwanted intrusions. Within an 
organization, the privacy of the firm might be linked 
to personal involvement through employee evaluation 
policies that either encourage safe practices or punish 
safety breaches. 

Among all of the factors we have discussed, per- 
sonal responsibility, self-efficacy, and response efficacy 
were the ones most related to intentions to engage in 
safe online behavior in our research [4]. Intentions are 
directly related to actual behavior. Self-efficacy has a 
direct impact on behavior over and above their effects 
on good intentions [2, 5]. Still, there are factors that 
intervene between intentions and behavior, especially 
when the protective measures are relatively burden- 
some and require attention over long periods of time, 
as is the case for online safety. 

Other sources of self-regulation can be tapped. 
Social norms also affect safety intentions [see 5] if we 
believe that our spouses and co-workers wish that we 
would be safer online. Having a personal action plan 
helps, as does a consistent context for carrying out the 
safe behavior. That builds habit strength. Another 
stratagem is offering ourselves incentives for executing 
our safety plan (for example, a donut break after the 
daily protection update). That is action control [1], 
and it has proven effective in managing long-term 
health risks that are analogous to the network security 
problem. 

Personalized interventions are critical. Seemingly 
obvious but undifferentiated communication strate- 
gies such as alerting users to spyware (found in [2, 5]) 
could have unwelcome effects. While there are differ- 
ences by gender and age [5], our experimental data 
suggests that a more refined audience segmentation 
approach is required. User education Web sites could 
screen visitors with “i-safety IQ” quizzes that would 
route them to appropriate content. Instead of serving 
as one-shot repositories of safety tips, online interven- 
tions might encourage repeat visits to build self-effi- 
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cacy and maintain action control. User-side applica- 
tions that detect problem conditions and alert users to 
their risks and potential protective measures and walk 
them through implementation would also help. 

We conclude that the average user can be induced 
to take a more active role in online safety. Progress has 
been made in uncovering the “pressure points” for 
effective user education. Here, we have attempted to 
fit these into a logical and consistent framework. Still, 
much work needs to be done to better understand 
online safety behavior, including experimental studies 
that can validate the causes of both safe and unsafe 
behavior. More diverse populations must also be stud- 
ied since much of the currently available research has 
focused either on uncharacteristically naive [9] or 
savvy [2] groups. Our experimental findings suggest 
that relatively modest, if carefully targeted, interven- 
tions can be effective in promoting online safety. 
Thus, improving user responsibility for overall online 


safety is a desirable and achievable goal. @ 
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REQUIREMENTS 
ENGINEERING 


IN NEW PRODUCT DEVELOPMENT 


How effective are the socto-technical interactions tn 
developing new products? 


What happens when an organization 
develops a new product? Although a 
common activity, both academics and 
practicing product developers have a 
limited understanding of the process. 
The process is both technically and 
socially complex and interacts with 
the organizational context in unpre- 
dictable ways. A basic property of the 
process is uncertainty [5, 6, 8], which 
an organization must gradually reduce 
as it transforms an ambiguous prod- 
uct concept into specific product 
requirements and ultimately a tangi- 
ble product that can be launched in 
the marketplace. What makes new 


product development (NPD) and the 
related process of requirements engi- 
neering (RE) difficult to manage is 
that the sources of uncertainty are 
largely hidden from the view of man- 
agers or analysts, embedded in task- 
related interactions within complex 
social networks of interdependent 
organizational roles. 
Recommendations for managing 
NPD and RE uncertainty emphasize 
cycles of communication among orga- 
nizational stakeholders [3, 8]. But how 
effectively do people in different roles 
communicate when they have conflict- 
ing goals and must compete with one 
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another for scarce organizational resources? And how 
does the effectiveness of their interactions affect RE 
and time-to-market for new products? Academics 
have made little progress modeling and evaluating the 
effectiveness of such interactions, and product devel- 
opers often must solve problems by trial and error, 
which is constrained by the sociopolitical climate of 
their organizations. 

We have been studying and modeling the NPD 
process in a large multinational high-tech company 
(MHTC) for the past five years. We have spent hun- 
dreds of hours talking to key players involved in NPD 
and RE, both informally and through formal inter- 
views for data collection. We developed diagnostic 
methods to help understand the complexity of 
requirements engineers’ social network interactions 
and to identify significant sources of 
uncertainty affecting the RE and 
NPD processes. Here, we examine 
and report the effectiveness of the 
interactions and communication 
patterns between RE and five other 
organizational roles involved in the 


NPD process at MHTC. 


STUDY BACKGROUND 

MHTC is a leading Canadian 
telecommunications firm. To 
improve its competitiveness, it 
adopted a strategy of introducing 


problems, MHTC established another organizational 
role called feasibility analyst (FA). The task of the FA 
was to conduct a feasibility study in which the mar- 
keting department’s new product requirements were 
mapped onto the firm’s existing technical capabilities 
to determine whether or not the new product could 
be built and supported at a reasonable cost. Manage- 
ment used the FA’s report to decide whether or not to 
commit company resources to develop the new prod- 
uct. Approved NPD projects were assigned a project 
manager (PM) whose task was to manage the product 
development process by setting up and coordinating 
teams from different functional groups, including an 
external software development (SD) vendor. Finally, 
all these roles collaborated with people in the opera- 
tions (OP) department, which took responsibility for 


CROSS-FUNCTIONAL COMMUNICATION 
AND COORDINATION DIFFICULTIES ARE 
COMMON IN FUNCTIONALLY DESIGNED 
ORGANIZATIONS NOT ONLY BECAUSE 

EACH DEPARTMENT HAS ITS OWN GOALS 
BUT ALSO BECAUSE EACH TENDS TO 
SPEAK ITS OWN SPECIALIZED LANGUAGE. 


more new products into the mar- 

ket. To be more sensitive to market 

conditions, responsibility for initi- 

ating the NPD process was reassigned from engi- 
neering to a restructured marketing unit of the 
organization called market sponsors (MS). 

The company is organized functionally: employees 
who perform similar functions are grouped into 
departments, such as operations, sales, marketing, 
information systems, and so on. Cross-functional 
communication and coordination difficulties are 
common in functionally designed organizations not 
only because each department has its own goals but 
also because each tends to speak its own specialized 
language. The collaboration required for NPD suc- 
cess made these communication and coordination 
problems much more apparent to management. For 
example, efforts to move new product ideas from 
marketing through the rest of the organization 
encountered major difficulties with the new NPD RE 
process. The problem was information incongruence: 
requirements engineers demanded a level of technical 
detail that market sponsors could not provide. 

To address these communication and coordination 
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managing product operations following a new prod- 
uct launch. 


METHOD 

We investigated the effectiveness of social network 
interactions and communication patterns between 
requirement engineers and other organizational 
roles at MHTC using a semi-structured interview 
methodology adapted from the “echo” method of 
Bavelas [2, 4, 9]. Interviews began by asking partic- 
ipants to describe their work situation in general 
terms and to identify other individuals or groups in 
the organization with whom they interacted on the 
job. As a result, a diagram in the shape of a star was 
formed for each interview, with the participant in 
the middle surrounded by other nodes representing 
individuals or groups comprising the participant's 
immediate task-related social network. The partici- 
pant was then asked to provide concrete examples of 
behaviors performed by other groups that were help- 
ful from the participant’s point of view, and exam- 


ples of behaviors that were not helpful. By asking for 
behavioral examples, the method is designed to focus 
participants’ attention on aspects of the work situa- 
tion that are meaningful 
in relation to their own 


in that category. RE’s major strength was knowledge, 
followed by communication, job attitude, and avail- 
ability. Their major weakness was coordination. The 
percentages of helpful and 
unhelpful comments about 


task objectives rather 
than from the perspec- 
tive of an_ external 
observer. 

Twenty-nine individu- 
als were interviewed, rep- 
resenting the five roles 
identified here (approxi- 
mately six per role): 
requirements engineering 
(RE), project managers 
(PM), market sponsors 
(MS), feasibility analysts 
(FA), and operations 
(OP). Interviews ranging from two to three hours 
were recorded and transcribed for coding. Responses 
were coded collaboratively by the research team mem- 
bers through an iterative process of coding, discus- 
sion, and recoding using the QSR NG [7] qualitative 
data analysis software. The coding focused on identi- 
fying the major categories of helpful and unhelpful 
behaviors mentioned by interviewees for each role. 
From these behavior cate- 
gories, we were able to 
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problem solving were 
equal, indicating this was 
neither a particular weak- 
ness nor a strength. 

Figure 2 summarizes 
the main categories of 
helpful and unhelpful 
behaviors of other roles as 
identified by RE. In total, 
183 examples of behaviors 
were identified. The most 
important category was 
knowledge, followed by 
communication, coordi- 
nation, and problem solvy- 
ing. The least important 
categories were job atti- 
tude and availability. The 
percentage of unhelpful behaviors was greater than 
that of helpful behaviors for all six categories, indicat- 
ing that RE perceived other roles as relatively weak in 
all areas. The major weaknesses were in communica- 
tion and coordination, 


followed by knowledge 


Availability 


Job Attitude 


Figure 1. Requirements 
engineering’s helpful and 
unhelpful behaviors as perceived 
by other roles. 
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ure 1 summarizes the 
main categories of helpful and unhelpful behaviors of 
RE as identified by the other roles. In total, 201 help- 
ful and unhelpful examples were identified. The per- 
centage of comments in a category reflects its relative 
importance. Coordination was seen as the most 
important behavior and availability as the least impor- 
tant. Problem solving and knowledge were of equal 
importance, followed by communication, and job 
attitude. 

The difference between the percentage of helpful 
and unhelpful behaviors in a category gives an indica- 
tion of the relative effectiveness of RE’s performance 


in all categories. One pos- 
sible explanation for this 
disparity is that the other 
roles generate uncertainty 
for RE in the form of 
ambiguous requirements and view the RE as helpful 
since it manages this uncertainty. On the other hand, 
RE expects less uncertainty in the requirements of 
other roles, but these expectations are seldom met. 
Effectiveness of Interactions. The ratio of the 
number of helpful to unhelpful behaviors provides an 
indication of the relative interaction effectiveness of a 
link in the network, when compared between links or 


Figure 2. Other roles’ helpful and 
unhelpful behaviors as perceived 
by requirements engineering. 
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to the organizational norm. In this case, the organiza- 
tional norm (average) was estimated as 0.95, com- 
puted as the ratio of the total number of helpful to 
unhelpful behaviors for all roles. Figure 3 is a socio- 
technical network diagram based on RE’s perception 
of other units and other 
units’ perception of RE. 
The direction of each 
arrow indicates a flow of 
behaviors from one role to 
the perceiver role, and the 
thickness of arrows corre- 
sponds to the number of 
behaviors identified for 
each link. Ratios larger 
than 0.95 are displayed in 
green to indicate effective- 
ness above the organiza- 
tional norm, and ratios less 
than 0.95 are displayed in 
red to indicate below-aver- 
age effectiveness. Because 
software developers (SD) 
were outside vendors we 
were unable to interview them, thus there is only one 
arrow from RE’s point of view. 

There are a number of items worth noting. First, 
the range of interaction effectiveness ratios (from 0.13 
to 1.67) reflects variability in the relationships 
between RE and other roles. Second, the least-effec- 
tive relationship is between RE and market sponsors 
(MS). One reason is that the MS is often uncertain 
about new product requirements and is also the 
source of requirements change during the NPD 
process, creating additional work for the RE. Mean- 
while, RE’s demands for precise information for 
requirements documentation are viewed by MS as 
frustrating and bureaucratic, since new product 
requirements are still being conceived and full details 
are not yet available. Third, the difference between 
link effectiveness can be used as a measure of the 
degree of asymmetry in the relationship. For example, 
the difference between RE and MS is 0.08, which 
reflects a fairly symmetrical relationship. On the other 
hand, the difference between project managers (PM) 
and RE is 0.95, and the difference between feasibility 
analysts (FA) and RE is 0.92, indicating fairly asym- 
metrical perceptions within these relationships. One 
possible explanation for these asymmetries is that 
other roles in the organization represent uncertainty 
to RE, while those roles view RE as a knowledgeable 
problem solver and appreciate RE’s efforts. 

Dynamics of Interactions. To provide a more 
detailed picture of what happens as RE interacts with 


Figure 3. Effectiveness of social 
network interactions between 
requirements engineering and 
other roles. 


80 


March 2008/Vol. 51, No. 3 COMMUNICATIONS OF THE ACM 


the other roles, specific examples of helpful and 
unhelpful behaviors are given here. Due to space con- 
straints, only unhelpful behaviors are reported for 
links with below average (< 0.95) interaction-eftec- 
tiveness ratios, and only examples of helpful behaviors 
are given for links with 
above-average ratios. 
Requirements Engineer- 
ing and Market Sponsors 
¢ MS Unhelpful (RE’s 
view): changing 
requirements halfway 
through the project, 
unrealistic expectations 
about delivery time, 
doesn’t listen to techni- 
cal explanations, not 
proactive, not prioritiz- 
ing customer require- 
ments, force-fits 
projects within a bud- 
get, lacks trust. 


¢ RE Unhelpful (MS’s view): overestimates costs, 
uses technical jargon, proposes expensive solu- 
tions, inflexible. 

Requirements Engineering and Project Managers 

¢ PM Unhelpful (RE’s view): lacks SAP knowledge, 
lacks technical knowledge, calls unnecessary sta- 
tus meetings and reports, doesn’t understand we 
work on multiple projects, expects immediate 
response to their inquiries. 

* RE Helpful (PM’s view): good teamwork, meets 
deliverables and deadlines, conscientious of what 
their client groups look for, good budget and 
resource management, flexible, access to experts, 
tracks projects, provides status reports, identifies 
problems and gives solutions, proactive, technical 
knowledge and experience, dedicated and avail- 
able. 

Requirements Engineering and Feasibility Analysts 

¢ RE Helpful (FA’s view): responds quickly, open to 
questions, knowledgeable in their area, suggests 
solutions, gives realistic expectations of a product, 
good relationship with operations (OP), account- 
able and dependable. 

* FA Unhelpful (RE’s view): offers solutions without 
knowledge and expertise, insufficient information 
about new product at meetings, lacks experience, 
creates patchwork solution, solves the wrong prob- 
lem, lacks training, mixes up business and product 
requirements, documents give sales pitch instead of 
technical requirements, goes directly to OP and 
bypasses us. 


Requirements Engineering and Operations 
* RE Helpful (OP’s view): looks at different compo- 
nents, such as networks and maintenance, provides 
good insight on business direction, good technical 
knowledge and system solutions, good relationship, 
knows our communication processes, helps us with 
technology issues, knows customer perspective and 
company perspective, clarifies processes and steps, 
helps write methods and procedures, involves us 
early in the project, gets input from subject-matter 
experts. 
OP Unhelpful (RE’s view): changes product or 
technology without informing us, slow response on 
signoff, unavailable when needed, lacks big picture, 
engages MS without our consent, changes solu- 
tions and dates, gives FA solutions based on mini- 
mal knowledge, doesn’t solve 
low-level problems before 
coming to us. 
Requirements Engineering and 
Software Developers 
* SD Helpful (RE’s view): builds 
good code, educates others, 
good links to analysts, proac- 
tive, flexible, willing to adjust 
priorities, works as part of our 
team, integrates with our peo- 
ple, after-hours support, pro- 
vides good information, good 
communication and relation- 


size more localized strategies that can be imple- 
mented within the existing organization structure. 

Reduce the Frequency of Unhelpful Behaviors. 
We found unhelpful behaviors created more work for 
individuals and delayed NPD projects anywhere from 
one day to three months. To improve interaction 
effectiveness between two roles, either the sender role 
must reduce its unhelpful behaviors or the recipient 
role must increase its capability to handle the uncer- 
tainty associated with unhelpful behaviors [1]. 

The results indicate that market sponsors were a 
major source of uncertainty in NPD, engaging in 
behaviors like “changing requirements” that require- 
ment engineers considered to be unhelpful. One way 
of reducing the frequency of this behavior would be to 
involve the RE during the early “ideation” stage of 


OUR FINDINGS PAVE THE WAY FOR 
THE CONTINUOUS IMPROVEMENT OF 
SOCIAL-NETWORK INTERACTIONS BY 
INCREASING THE FREQUENCY OF 
HELPFUL BEHAVIORS AND REDUCING 
THE FREQUENCY OF UNHELPFUL 
BEHAVIORS. 


ship, complete and accurate 
estimates, clarifies when we 
don’t understand the ques- 
tions. 


IMPROVING SocIAL NETWORK INTERACTIONS 

The results provide insights into the behavioral char- 
acteristics and effectiveness of socio-technical net- 
works involved in RE and new product development 
at MHTC-. As such, the results establish a base from 
which to develop strategies for changing network 
interactions to improve RE and NPD performance. 
Since many MHTC’s interaction difficulties were 
the outcome of its functionally designed organiza- 
tion structure, one potential way to improve interac- 
tions would be to restructure the organization. For 
example, changing to a product- or market-based 
design would group REs together with other inter- 
dependent roles. A matrix structure could also pro- 
vide better cross-functional communication and 
coordination. However, it has been our experience 
that attempts to redesign large organizations face 
substantial opposition from major stakeholders. 
Thus, the recommendations proposed here empha- 


NPD. However, the cost accounting system at 
MHTC discouraged such early interactions since it 
required that an RE’s time be charged against NPD 
project funding, which was only available after the 
project had been approved for feasibility analysis. At 
least two solutions are available to solve the problem. 
First, recognizing its importance to project success, 
higher management in the MS unit could allocate a 
fund for early RE-MS interactions. Second, REs 
could provide early project advice free of charge, with 
costs allocated as overhead to all projects. 

Increase the Frequency of Helpful Behaviors. The 
results also indicate that REs played a major role in 
handling NPD uncertainty by sharing their knowl- 
edge, which other roles regarded as very helpful. A 
notable difference between experienced and inexperi- 
enced REs was that experienced REs had better 
knowledge of the organization, of MHTC technical 
systems, and of who to contact to obtain specific 
information. Sharing this knowledge with less experi- 
enced REs would therefore increase the latter’s uncer- 
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tainty-handling capability. One way to do so would 
be to set up a knowledge center staffed by experienced 
REs available to answer questions from REs with less 
experience or to connect them to another person able 
to provide the necessary information. 

A Cycle of Continuous Improvement. The effec- 
tiveness of link interactions was measured in compar- 
ison to the overall norm of helpful and not helpful 
behaviors in the organization. The ratio of 0.95 
means there was approximately one unhelpful behav- 
ior for every helpful behavior. Needless to say, an 
organization interested in improving its performance 
could increase its standards for evaluating interaction 
effectiveness. For example, if MHTC used a standard 
of three helpful behaviors for every two unhelpful 
behaviors (a ratio of 1.5), three of the four effective 
links in Figure 3 would be reclassified as ineffective. A 
cycle of continuous improvement can be established 
in which link-interaction effectiveness is improved, 
standards are raised, and the process repeated. Statis- 
tical techniques for tracking variation in system per- 
formance (for example, six sigma methods) could 
conceivably be applied at the levels of specific behav- 
ior categories, link interactions, or the overall socio- 
technical network. 


CONCLUSION 

This study used a socio-technical methodology to 
measure the effectiveness of interactions between 
requirements engineering and other groups involved 
in the NPD process at MHTC. We identified major 
strengths and weaknesses in the process and specific 
behaviors that helped and hindered NPD perfor- 
mance. We provided an overall assessment of inter- 
action effectiveness from the point of view of each 
participant. Our findings pave the way for the con- 
tinuous improvement of social-network interactions 
by increasing the frequency of helpful behaviors and 
reducing the frequency of unhelpful behaviors. 

The methodology can be generalized and applied 
as a diagnostic tool to assess interaction effectiveness 
in other organizational settings. It enables managers 
and analysts to obtain a descriptive model of the 
behavioral characteristics of a complex socio-technical 
process, providing insights into the sources of task- 
related uncertainty and a base from which improve- 
ment strategies can be devised. The method focuses 
on social-network interactions among organizational 
roles and uses a generic style of questioning that does 
not presume the existence of particular procedures or 
practices. It is important to recognize that the method 
provides both a local context-specific view of behav- 
iors, as well as a system-level perspective of the orga- 
nizational process. By focusing on interaction 
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networks the method reflects role expectations and 
other organizational constraints that influence task 
performance (such as division of work, performance 
measurement, power relationships, and so forth). It is 
also important to recognize that the method is both 
quantitative and qualitative in nature. Qualitative 
results provide rich context-specific information 
about individual jobs, while the quantitative analysis 
provides a systemic view of interactions and their 
effectiveness using a common baseline for compari- 


son. @ 
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PEER-BASED 


REFINEMENT 
AN EMPIRICAL INVESTIGATION 


Nonexpert peer-based knowledge refinement, 
Lt turns out, td Judt ad helpful as expert- -centric 
knowledge refinement for unproving the quality Yy 


of ree sult. 


Knowledge management (KM) 
repository-based systems (such as 
those involving “best practices” 
and “lessons learned” applica- 
tions) are generally costly to oper- 
ate since they require expert 
judgment to determine which 
knowledge submissions are to be 
included in the system and 
refined to make them as effica- 
cious as possible. 

Empirical evidence in cognitive 
psychology suggests that experts 
may not be needed for such refine- 
ment when the knowledge con- 


sumers are nonexperts. The 
knowledge “distance” between 
experts and nonexperts may 


indeed weaken  expert-centric 
knowledge refinement. In addi- 
tion, peer judgments delivered to 
nonexpert end users may substi- 
tute well for expert judgments. 
Multiple peer judgments, espe- 
cially when provided through 
computer-supported knowledge- 
refinement systems, may be much 
less costly and just as good or per- 
haps even better than expert judg- 
ments, since peers are likely to 
think more like nonexpert users. 
A computer-support system is 
helpful for facilitating peer-based 
knowledge refinement, since more 
peers than experts are probably 
required for peer-based refinement 
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COMPUTER SUPPORTED KNOWLEDGE 


83 


THE PROBABILITY OF A SERIOUS PROBLEM 
BEING DETECTED INCREASES AS THE NUMBER OF 


PEER REVIEWERS GROWS. 


to be effective. Here, we present the results of an 
experimental study we conducted and a corporate 
application that confirm our hypothesized equality or 
superiority of peer-based knowledge refinement com- 
pared to expert-centric knowledge refinement. We 
make no attempt to compare the actual costs of using 
individual experts vs. multiple peers; we address only 
the issue of comparing the quality of the results of the 
two options. 

Knowledge repositories are KM systems that play a 
crucial role in extending organizational memory, pre- 
venting organizational forgetfulness, and leveraging 
competitive advantage. When an organization solicits 
knowledge from its employees, it must evaluate the 
submitted knowledge and refine it into a form that is 
most useful for system users. A traditional assumption 
in the knowledge-refinement process suggests that 
experts “provide a framework for evaluation and 
incorporating new experiences and information” [5]. 

However, when the users of a repository-based KM 
system are nonexperts, the knowledge selected and 
refined by experts may not necessarily be most rele- 
vant or useful to those users. For example, technical- 
support staff members usually —_ access 
knowledge-repository systems for topics that are unfa- 
miliar to them. And scientists and engineers working 
on radical innovations often search beyond their own 
domain expertise for reusable ideas. They may be 
experts in their own domains but are nonexperts 
when searching for and evaluating knowledge created 
in other domains. 

Research in cognitive psychology suggests that 
experts and nonexperts are fundamentally different in 
the way they represent knowledge and solve problems 
[3]. Experts have plentiful domain-specific knowl- 
edge that is highly organized, while nonexperts have 
loosely organized knowledge. Compared to nonex- 
perts, experts are quicker at detecting problems; they 
need fewer cues, access their memory rather than 
focus on the task at hand, use heuristics rather than 
exhaustive search, recognize data patterns, and use 
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compiled rules and response plans. 

Paradoxically, experts may also have “spectacularly 
narrow” views on knowledge (from the nonexpert 
user's point of view). For instance, a study [1] showed 
that in reading and evaluating requirements docu- 
ments, better results are achieved when software 
developers are able to first explore and absorb the per- 
spectives of others (such as testers and users), in addi- 
tion to their own. 

One well-known expert behavior is the way experts 
tend to underestimate the difficulty of tasks to be per- 
formed by nonexperts. Laboratory experiments have 
shown that people who know a solution to a problem 
tend to underestimate the difficulty others face in 
solving it. Similarly, researchers have found that read- 
ers with extensive topic knowledge have trouble esti- 
mating how well readers with limited topic 
knowledge will understand the same topic. 

Experts also tend to overestimate the potential per- 
formance of nonexperts, probably because they detect 
and diagnose problems on the basis of knowledge 
readily available in their memories. Experts were 
shown in [8] to overestimate nonexperts’ performance 
by underestimating the time the nonexperts needed 
for task completion. 


PEER-BASED KNOWLEDGE EVALUATION 

When nonexperts code their knowledge into a form 
that is later refined by an expert, their knowledge 
differences may prevent them from comprehending 
the results, even when the refinement is of high 
quality. Since experts often anchor the knowledge- 
refinement process to knowledge that nonexperts 
may not be able to access, such feedback often leads 
to misunderstanding by nonexpert users. Moreover, 
explanations that are helpful to experts may not nec- 
essarily be helpful to nonexperts. 

Contrary to intuition, similarities among peers can 
actually facilitate knowledge refinement. When the 
intended audience consists of nonexperts, a group of 
peers is often better than experts in providing evalua- 


tions and feedback on peer-developed materials. Peers 
are more likely to share knowledgebases, experience, 
and problems; such socially shared cognition enables 
them to establish common ground that stimulates 
development of mutual knowledge, along with an 
error-correction mechanism. Because peers are closer 
to one another cognitively and behaviorally, they bet- 
ter understand what they need in a codified piece of 
knowledge than do experts. 

The apparent superiority of peers is presumably 
due to nonexperts being better at detecting or diag- 
nosing problems that are relevant to their peers. They 
are more accurate than experts at understanding other 
nonexperts’ problems because they use more cues and 
more exhaustive search strategies and do not restrict 
themselves exclusively to private knowledge. These 
qualities are likely to make nonexperts more adept at 
coaching their peers in problem solving. 

Peer benefits are augmented through the interac- 
tion of multiple peers. The value of multiple peers was 
recognized in [10], observing that large groups of 
average people can make better decisions than those 
made by a single expert when they contribute diverse 
unbiased opinions. When multiple peers participate 
in knowledge refinement, the aggregated benefits can 
be significant. One possible reason is that multiple 
peers create a larger search space for potential prob- 
lems in the target knowledge; more reviewers find 
more problems. Also, multiple peers can make a seri- 
ous problem in the material more salient for the con- 
tributor. The probability of a serious problem being 
detected increases with the number of peer reviewers. 
When more than one reviewer points out the same 
problem, the contributor has more reason to take the 
comment seriously. Moreover, multiple peers counter- 
balance idiosyncratic biases from individual reviewers, 
making the refinement process even more reliable. 


PEER-BASED REFINEMENT SYSTEM 

Here, we describe peer-based knowledge refinement 
supported by a system described in [4]. Because 
knowledge is usually submitted in the form of a doc- 
ument, the system facilitates the processing of docu- 
ments (such as those submitted to best-practice 
repositories). First, knowledge needs are solicited 
and potential contributors asked to submit knowl- 
edge in, say, the form of proposed “best practices” 
they have developed for a particular procedure, 
method, or problem. The first drafts authors submit 
to the system serve as raw material for the refinement 
process; the system identifies a diverse set of nonex- 
pert peers to serve as reviewers for each submitted 
draft. The contributors’ identities need not be 
revealed. 


Peer reviewers make qualitative, then quantitative 
assessments of each submission on the basis of multi- 
ple criteria; for this study, the reviewers used flow, 
logic, and insight as the criteria. They submitted writ- 
ten comments on each of the dimensions. They also 
rated the quality of each draft on a seven-point scale, 
with 0 the lowest and seven the highest. After the sys- 
tem collected all evaluations from the reviewers, the 
system integrated them and computed quality mea- 
sures for each knowledge submission, as well as the 
reliability of the individual reviewer evaluations based 
on built-in reliability-estimation algorithms. At this 
point, drafts were “stamped” with these initial quality 
measures based on aggregated ratings (weighted by 
the computed reliability). The system provided 
authors with reviewer comments, as well as quantita- 
tive quality measures, based on which submitters 
revised and resubmitted the knowledge document. 
Each contributor was also able to evaluate the help- 
fulness of each reviewer's feedback in terms of refining 
the document. 

During the final stage, reviewers from the first- 
round review process read the revised drafts and gen- 
erated another round of written comments and 
ratings the system again used to compute quality mea- 
sures for the final drafts and reviews. In addition to 
evaluating the documents, the reviewers determined 
whether they qualified for inclusion in the repository. 
Again, contributors assessed the usefulness of these 
second-round reviews. Synthesizing reviewer recom- 
mendations, two rounds of reviews, and contributor 
evaluation of review quality, the system selected the 
most valuable documents to be stored in the reposi- 
tory in which contributors and reviewer identities are 
revealed, recognizing their contribution. 


EXPERIMENTAL STUDY 
Our empirical study, conducted at the University of 
Pittsburgh, simulated the knowledge-refinement 
process in an experiment that allowed us to observe 
the relative impact of experts vs. peers on the quality 
of codified knowledge intended for use by nonex- 
perts. We compared quality improvement in techni- 
cal reports refined by feedback from a subject-matter 
expert, a nonexpert peer, or multiple nonexpert 
peers. The subject-matter expert was an academic 
scholar with a Ph.D. and social-science expertise. 
The nonexpert participants were 28 undergraduate 
students with an average of 3.4 college years enrolled 
in a social science course not taught by the expert 
but covering a portion of the expert’s domain knowl- 
edge. 

Individual participants wrote and revised drafts 
that partially fulfilled the requirements of the course. 
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The same participants, serving as reviewers and refin- 
ers, evaluated six peers’ first and revised drafts. Prior 
to the experiment, participants were tested on basic 
document-generation skills. Based on the scores, they 
were matched into blocks, then randomly assigned to 
one of three feedback source conditions: single expert 
(SE), single peer (SP), and multiple peers (MP). In 
the SE condition, the author received only the 
experts review. In the SP 
condition, the best review 
of the six nonexpert 
reviews was selected and 
made available to the 
author. And in the MP 
condition, participants 
received all six peer reviews 
but not the expert review. 
To minimize bias, the par- 
ticipants were blind to 
reviewer identities and sta- 
tus, whether their docu- 
ments were evaluated by 
nonexpert peers or by an expert, contributor identity, 
and who could receive reviewer feedback. The partic- 
ipants were all told that the anonymous reviewers 
alone would determine the quality of their submitted 
documents. 

About three months after the experiment, the 
expert reevaluated 30% of 
the same documents (ran- 
domly selected). There 
was significant agreement 
between the expert’s first 
and second evaluations, 
showing strong test-retest 
reliability. A second expert 
then independently evalu- 
ated the expert and nonex- 
pert evaluations while 
being blind to the source 
of evaluations and showed 
a statistically significant 
correlation with the 
expert. 

After being assigned to 
experimental “treatments,” the course instructors 
introduced the participants to the system. All remain- 
ing procedures were managed online by the system. 
On the system's prompt, all participants submitted 
their first drafts online by the same date. Each partic- 
ipant then received six drafts (randomly selected by 
the system). At the same time, the expert reviewed all 
the drafts. The expert and nonexpert reviewers 
assessed the drafts on the three evaluation dimen- 


Figure 1. Quality improvement 
with standard error bars. 


Expert Feedback 


i 
Peer Feedback 


Figure 2. Expert and peer 
perception of expert and 
peer feedback. 
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SE SP MP 


sions: flow (document readability, emphasizing orga- 
nization and overall composition); logic (the degree to 
which the arguments presented in the document were 
supported by evidence); and insight (whether the 
document provided innovative ideas that indicate cre- 
ativity). 

Even though each document received one expert 
and six peer reviews, only some of the reviews were 
made available to each of 
the contributors, 
depending on the experi- 
mental condition. After 
receiving feedback, each 
participant submitted 
revised drafts, evaluated 
the helpfulness of the 
feedback, then received 
the second reviews on the 
revised drafts. Contribu- 
tor evaluations of these reviews were not available to 
the reviewers. 


SE SP MP 


SE SP MP 


RESULTS OF THE EXPERIMENT 

We assessed the differences in the impact of expert- 
based vs. peer-based knowledge refinement through 
a two-way mixed ANOVA on quality improvement 
from first to second drafts as measured by expert 
evaluations. Simple main-effect analyses revealed 
that flow in MP was sig- 
nificantly better than in 
SE and SP, that logic was 
the same across all condi- 
tions, and that insight in 
MP was significantly bet- 
ter than in SE (see Figure 
1). Documents reviewed 
by multiple peers 
undergo significant qual- 
ity improvement in both 
flow and insight. This 
result supports our 
hypothesis that knowledge distance between experts 
and nonexperts may hinder knowledge refinement 
and our hypothesis that knowledge refinement ben- 
efits from multiple peer feedback. The effect was 
particularly strong on the insight criterion, suggest- 
ing that multiple peer reviews are likely to stimulate 
creative ideas. In addition, peers judged expert and 
peer feedback as equally helpful, while experts 
judged expert feedback as more helpful than peer 
feedback, suggesting that when the target audience 
consists of nonexpert users, nonexpert refiners are 
just as helpful as expert evaluators (see Figure 2). 


WHEN THE TARGET AUDIENCE CONSISTS OF 
NONEXPERT USERS, NONEXPERT REFINERS ARE JUST 
AS HELPFUL AS EXPERT EVALUATORS. 


REAL-WORLD APPLICATION 
We verified these experi- 
mental findings with data 
we collected from an IT 
consulting firm in Korea 
that had implemented a 
procedure enabling peer- 
expert comparisons in its 
customer service process. 
It asked customers to eval- 
uate answers (“thumbs 
up/satisfactory” or “thumbs 
down/unsatisfactory”) pro- 
vided by customer service 
representatives. Answers to 
customer questions in an 
existing database were provided by either expert 
designers or programmers. Out of 245 answers, 134 
(55%) were refined by peers, and 111 (45%) were 
refined by experts before customers received responses. 
Among the 162 (66%) rated by customers, 116 (71%) 
were voted satisfactory and 28 (46%) unsatisfactory. 
Meanwhile, 79% of the peer-refined responses were 
satisfactory, and only 62% of the expert-refined 
responses were satisfactory (see Figure 3). In contrast, 
21% of the peer-refined responses were unsatisfactory, 
whereas 38% of the expert-refined responses were 
unsatisfactory. These differences are statistically signif- 
icant, giving further credibility to the generalizability 
of the results of our experiment. 


Figure 3. Customer satisfaction 
ratings of answers refined by 
experts and by peers. 


RESULTS 
Our study represents one of the first attempts to 
empirically investigate properties of the knowledge- 
refinement process. The results show that, as we 
hypothesized, the knowledge “distance” between 
experts and nonexperts impaired expert-based 
knowledge-refinement, while the close knowledge 
distance among peers facilitated knowledge refine- 
ment. 

Considering that the work of experts is rarely done 
without time constraints, expert-based knowledge 
refinement may be worse. Experts under time pressure 


often default to such typ- 
ical expert behaviors as 
using fewer cues than 
nonexperts to build task 
representations. They 
exhibit these behaviors by 
activating existing task 
schemata in memory. By 
relying more on their 
expert instincts under 
time pressure, experts 
may be less likely to take 
the time to consider the nonexpert'’s perspective. 

Computer-supported peer review systems offer 
what may be a more financially affordable option. 
Contributors and reviewers alike may be rewarded for 
their service by publishing their names when their 
knowledge is selected for inclusion in a repository. 
Thus, contributors and reviewers alike enjoy substan- 
tial social rewards (such as citation credit and peer 
approval). This was observed in an informal knowl- 
edge repository in a software development firm [6] 
and is a well-known characteristic of the Linux virtual 
development team [9]. Over time, such repositories 
enable development of reputation systems, helping 
users assess likely knowledge relevance and quality. A 
similar reputation system at the group level has 
directed user attention to high-quality content in an 
electronic document database [7]. 

A peer-based knowledge-refinement process 
designed to help users assess content quality should 
gradually build trust as a result of the creation of a vir- 
tual community. When a large number of documents 
is available in such a repository, the system becomes a 
knowledge market that competes for the reader’s lim- 
ited attention [7]. Systems allowing users to inspect 
feedback from other users may help maintain trust in 
the repository in a way that’s similar to the way online 
merchants (such as Amazon.com and eBay.com) 
establish consumer trust through a_peer-feedback 
mechanism. 

Peer-based knowledge refinement makes it possible 
for organizations to establish reward systems for both 


Not Satisfactory | 
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knowledge codification and refinement. Such systems 
may use extrinsic incentives, as well as social reputa- 
tion rewards, to motivate employees to participate in 
knowledge refinement. Employees rewarded through 
this process may be more likely to use knowledge 
from the repository system for their own tasks. These 
benefits may explain the success of peer reviews (such 
as software pattern writers relying on peer discussions 
when writing up patterns). 
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Dinesh K. Gauri, Amit Bhatnagar, and Raghav Rao 


n the e-commerce realm, most 

price comparison Web sites 

such as pricegrabber.com and 
cnet.com also provide information 
regarding store ratings to their 
customers. These e-ratings are 
obtained from previous customers 
and are a credible source of infor- 
mation for current customers in 
the pre-purchase phase. However, 
it is not clear how important these 
ratings are to consumers as com- 
pared to other store attributes, 
such as site design, clarity of infor- 
mation, order tracking, on-time 
delivery, and customer service. 
Store managers responsible for 
allocating resources across differ- 
ent attributes need to know this in 
order to provide value to the cus- 
tomers visiting their site. 

In traditional marketing, word 
of mouth (WOM) is the informa- 
tion one obtains through interper- 
sonal communication with friends 
and family but in an online envi- 
ronment, store ratings are the 


source of this interpersonal com- 
munication and are obtained from 
other consumers, not just friends 
and family. WOM has been stud- 
ied extensively in traditional mar- 
keting [3] and MIS [4]. The MIS 
literature [1, 5, 6] has focused on 
building trust in the online envi- 
ronment to alleviate any risks 
associated with shopping online. 
Bowman and Narayandas mea- 
sured WOM via a survey, and 
found WOM increases customer 
loyalty [3]. In the study reported 
here, we compare online store rat- 
ings with other determinants of e- 
store loyalty. We are also interested 
in learning how ratings influence 
online store loyalty across product 
categories. 


DaTA 

The data was collected from 
BizRate.com, an online price 
comparison Web site, and 
Alexa.com. Online shoppers use 
BizRate.com to compare prices of 


Role of Word of Mouth in 
Online Store Loyalty 


Comparing online store ratings with other e-store loyalty factors. 


an item across multiple online 
retailers. For each retailer, in addi- 
tion to prices, Bizrate.com also 
provides information about aggre- 
gate customer ratings on a num- 
ber of attributes. BizRate.com 
obtains the data for these cus- 
tomer ratings from two different 
sources. The first source is e-tailers 
that have allowed BizRate to col- 
lect feedback directly from their 
customers. The second source is a 
panel of over 1.3 million active 
online shoppers who have volun- 
teered to rate online stores. 
BizRate.com determines the 
weighted averages of the customer 
ratings across the two sources, and 
these aggregate ratings for each 
store are displayed on the Web 
site. 

After customers conclude a 
purchase, they are requested to 
complete a feedback form. 
Bizrate.com also conducts a fol- 
low-up email survey to obtain cus- 


tomer feedback regarding quality 
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of post-purchase services. 
Across the two surveys, 
the respondents are asked 
to rate the retailers on 14 
e-store attributes as 
shown in the table here. 
The respondents must 
also provide an overall 
rating for each store, 
which is used by 
BizRate.com to deter- 
mine the percentage of 


Ease of 
Selection 


Clarity 


positive ratings for each Product Availability 0.12 
store. This variable allows — Order Tracking ese 
: On-time Delivery 0.19 

us to determine how the 
Percentage of Positive 0.25 


positive reviews provided 
by other consumers 
influence a consumer. 
For each retailer, 
BizRate.com also provides infor- 
mation about the total number of 
customers that have reviewed that 
store. The respondents are also 
asked to state the likelihood of 
their shopping again at that store 
ona scale of 1 to 10. Consumer 
responses to this question became 
the dependent variable in our 
analysis. 


e collected data for 441 

online retailers during 

late 2005.' One of the 
goals of this study was to deter- 
mine whether the importance of 
store ratings would vary with 
product category. We collected 
data for retailers of three different 
product categories, such that two 
(DVDs and Videos, Books and 
Magazines) were standard and had 
very little variance in features and 


ie : 2 : : 
See www.bizrate.com for a complete list and descrip- 
tion of these attributes. 


90 


Years on the Web 
Met Expectations 


Ratings (Positive WOM) 


Books and DvD | Flowers | 
‘Magazines | and Video | and Food 


Relative Price 


0.02 
0.05 
0.09 


0.04 
0.06 
0.09 
0.07 
0.01 
0.06 
0.06 
0.03 
0.008 


0.005 — 
0.13 


Note: The values in each of the cell represent the average contribution of the corresponding 
variable in predicting the repurchase likelihood at the e-store. 


Average contribution of a variable in 
predicting repurchase likelihood across 
categories using dominance analysis. 


quality, and the third (Flowers and 
Food) was non-standard and 
therefore had high variance in fea- 
tures and quality. 


ANALYSIS 

We sought to determine the 
importance of different store 
attributes in influencing the likeli- 
hood of repurchase. The simplest 
approach would be to conduct a 
linear regression analysis with the 
repurchase intention as the depen- 
dent variable and the stores’ attrib- 
utes as the independent variables, 
and then compare the standard 
coefficients. Unfortunately, all the 
independent variables are highly 
correlated, leading to the problem 
of multicollinearity.? The common 


°To check for multicollinearity, we used variance infla- 
tion factors (VIF), which are the diagonal elements of 
the inverse correlation matrix. We found the VIF values 
of a few variables were above 10, showing there was a 
multicollinearity problem. 
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solution to the multi- 
collinearity problem is to 


0.04 factor the independent 
0.06 variables into orthogonal 
0.09 factors. This approach 

oe meant that rather than 
studying the importance 
“ of store ratings, we would 
aes be able to study the 

0.002 importance of some factor 


made up of more than 
one store attribute. 

We used dominance 
analysis [2] to compare 
the relative importance of 
different predictor vari- 
ables. In dominance 
analysis (DA), the overall 
contribution of an inde- 
pendent variable to the prediction 
of the dependent variable (repur- 
chase intention in our case) ina 
multiple regression is determined 
by considering all possible subset 
selections of various models possi- 
ble with the set of independent 
variables. One variable is said to 
dominate another if it is more use- 
ful than its competitors in all sub- 
set regressions. The DA approach 
provides the most general context 
by taking into account all relevant 
subset models, where a relevant 
model is either any subset model 
that can be formed from the pre- 
dictors or any subset model that is 
theoretically possible and of inter- 
est. The average contribution of 
each variable in the various cate- 
gories, computed after running the 
DA approach is reported in the 
table here. If this average contribu- 
tion is high for any independent 
variable, it will imply that particu- 
lar variable contributes more 


It is interesting that of all the attributes, positive customer reviews have 
the greatest impact on repurchase intention. 


toward predicting the repurchase 
intentions of consumers in that 
category. 

We find a similar pattern of 
importance rankings across all the 
three categories. We find that posi- 
tive word of mouth has the maxi- 
mum impact on repurchase 
intention in all the cases. This is 
followed by on-time delivery and 
order tracking, suggesting the rela- 
tive importance of different store 
attributes is not influenced by 
product category. 


CONCLUSION 

It is interesting that of all the 
attributes, positive customer 
reviews have the greatest impact 
on repurchase intention. This is 
consistent across all categories. 
Even more impressive is the find- 
ing that number of years on the 
Web has the least impact on 
repurchase intention. This has sig- 
nificant implications for managers 
of online stores because it suggests 
that stores would attract more cus- 
tomers by having positive cus- 
tomer reviews. The amount of 
time the store has been in business 
does not seem to affect the repur- 
chase intention of consumers. 
Another interesting finding is that 
it is not the total number of 
reviews that influences customer 
repurchase intention, but the per- 


centage of positive reviews. This is 
important for new retailers that 
will have a lower number of total 
customer reviews than well-estab- 
lished retailers. 

Our findings suggest managers 
can increase loyalty to their price 
comparison sites by providing cus- 
tomer review ratings. Interestingly, 
while most of the price compari- 
son sites have started offering these 
ratings, many of them do not. A 
case in point is Froogle, Google’s 
price comparison Web site, which 
does not provide customer ratings 
of stores. Froogle has not become 
widely used and we suspect one 
reason is because the site does not 
provide store ratings. 

Our finding may also explain 
paradoxes like Amazon.com having 
higher prices than Half.com and 
still performing better. The differ- 
ence is that Amazon.com has cus- 
tomer reviews and Half.com does 
not. The chief executive and 
founder of Amazon, Jeffrey P. 
Bezos, also acknowledged this: 
“Word of mouth remains the most 
powerful customer acquisition tool 
we have, and we are grateful for 
the trust our customers have 


‘According to Nielsen/NetRatings, Froogle had 6.6 
million visitors in July 2006, lagging behind 
Shopzilla.com, the top shopping search engine, which 
racked up 17.2 million visitors, and Yahoo’s shopping 
network, which had approximately 11.1] million. 


placed in us. Repeat purchases and 
word of mouth have combined to 
make Amazon.com the market 
leader in online bookselling.” @ 
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Allegheny College 
Department of Computer Science 
The Department of Computer Science invites 
applications for a tenure-track position begin- 
ning Fall 2008. Qualifications include a Ph.D. 
in computer science. Applicants with interests 
in graphics, media computation, computation- 
al science, or data management and security 
are preferred; however, candidates from other 

areas of computer science will be considered. 

Applicants must provide evidence of abili- 
ty to teach effectively at the undergraduate 
level, commitment to liberal arts education, 
and continuing contribution to the discipline. 
Responsibilities include teaching and advis- 
ing undergraduates, guiding students in sen- 
ior research projects, and contributing to the 
college-wide freshman/sophomore seminars 
that emphasize speaking and writing. Salary 
will be competitive; start-up funds are avail- 
able. Rank will be commensurate with cre- 
dentials and experience. 

Allegheny College is a highly selective pri- 
vate liberal arts college with a dedicated facul- 
ty of teacher-scholars. Information about the 
Department and its traditional and applied 
computing majors is available on the Web at 
hetp://cs.allegheny.edu. 

Send letter of application, vita, statement of 
teaching and research interests, applicable tran- 
scripts, and arrange to have three letters sent from 
references, at least one of whom can comment on 
teaching, to: Dr. Robert S. Roos, Associate 


Professor and Chair, Department of Computer 
Science, Allegheny College, Meadville, PA 
16335; email: robert.roos@allegheny.edu. 


Review of applications will begin immedi- 


ately. Allegheny College is an Equal 
Opportunity Employer with a strong insticu- 
tional commitment to develop a diverse facul- 
ty and staff. Women and members of other 
especially 


under-represented groups are 


encouraged to apply. 


Bloomberg LP 
Senior Computer Science Technical 
Trainer 

The Company: 

Bloomberg is the leading global provider of 
financial data, news and analytics. The 
BLOOMBERG PROFESSIONAL service and 
Bloomberg's media services provide real-time 
and archived financial and market data, pric- 
ing, trading, news and communications tools 
ina single, integrated package to corporations, 
news organizations, financial and legal profes- 
sionals and individuals around the world. 


The Role: 

Bloomberg's expert-level Training team is 
looking to augment their current talent with a 
self-motivated, highly-experienced Computer 
Science Technical Trainer. The successful candi- 
date will love technology and love to train oth- 
ers. Our team works closely with other R&D 
groups at Bloomberg, to analyze technical 
training and develop and deliver appropriate 
technical training for job skills, as well as pro- 
fessional development programs. Our instruc- 
tors are responsible for the curriculum as well as 
presentation of the various training pro- 
grams/initiatives. We work with latest tech- 


nologies and serve as both trainers and develop- 
ment consultants to a technical staff of 2000. 


Requirements: 
A Master's degree or PhD in Computer 
Science or Computer Engineering 

¢ At least 4 years of hands-on C/C++ devel- 
opment experience 

¢ Experience with High-Performance 
UNIX Programming 

¢ Solid understanding of Data Structures, 
Algorithms, and Modular/Object-Oriented 
Design 

¢ Working 


Programming (threads, sockets, etc.) 


knowledge of Systems 

¢ Teaching experience in Business or 
Academia 

¢ Experience in the Software Engineering 
Life Cycle 

¢ Knowledge of Relational Databases 

¢ Strong verbal and written communica- 
tion and Presentation skills 
Real-Time Trading 
Systems or Financial Information Systems is a 


¢ Background in 


plus 
¢ Working knowledge of web technologies 
(XML, SOAP, PHP) is a plus 


Apply for this job at: https://bloomberg. 
taleo.net/servlets/CareerSection?art_ip_action 
=FlowDispatcher&flowTypeNo= 1 3&pageSeq 
= 2&reqNo=11550&art_servlet_language=en 
& s e | e c t - 
ed_language=en&csNo= 10000#topOfCsPage 

or contact Barbara Meyer at bmeyer8@ 
bloomberg.net 


ACM POLICY ON NONDISCRIMINATORY ADVERTISING 
@ ACM accepts recruitment advertising under the basic premise the advertising employer does not discriminate on the basis of age, color,race, religion, 
gender, sexual preference, or national origin. ACM recognizes, however, that laws on such matters vary from country to country and contain exceptions, 
inconsistencies, or contradictions. This is true of laws in the United States of America as it is of other countries. # Thus ACM policy requires each advertising 
employer to state explicitly in the advertisement any employer restrictions that may apply with respect to age, color, race, religion, gender, sexual preference, 
or national origin. (Observance of the legal retirement age in the employer's country is not considered discriminatory under this policy.) ACM also reserves 
the right to unilaterally reject any advertising. ¢ ACM provides notices of positions available as a service to the entire membership. ACM recognizes that from 
time to time there may be some recruitment advertising that may be applicable to a small subset of the membership, and that this advertising may be inherently 
discriminatory. ACM does not necessarily endorse this advertising, but recognizes the membership has a right to be informed of such career opportunities. 
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Case Western Reserve 
University 
Electrical Engineering and Computer 
Science 
Faculty Positions Division of Computer 
Science Department of Electrical Engineering 
and Computer Science Case Western Reserve 
University Cleveland, Ohio 44106-7071 The 
Department of Electrical Engineering and 
Computer Science at Case Western Reserve 
University is seeking Computer Science facul- 
ty candidates at all levels. We invite appli- 
thrust Biomedical 


cants in our areas 


Informatics and Computational Biology, 


Information Networks, Smart Power 
Systems/Power Informatics, and Safe, Secure, 
and Reliable Software. Also, to support these 
thrust areas, we invite applicants in knowl- 
edge and data management, data mining, 
information retrieval, computer graphics and 
visualization, artificial intelligence, machine 
learning, computer networks, distributed sys- 
tems, software engineering, computer securi- 
ty, human-computer interaction, and algo- 
rithms. See http://www.zmo@eecs.case.edu or 


hetp://www.eecs.case.edu for more details. 


Please submit CV, research and teaching inter- 


est statements, and three recommendation let- 
ters to: Faculty Search Committee Division of 
Computer Science Department of Electrical 
Engineering and Computer Science Case 
Western Reserve University 10900 Euclid 
Avenue Cleveland, OH 44106-7071 in 
employment as in education, Case is commit- 
ted to affirmative action and equal opportuni- 
ty. Women and minorities are encouraged to 
apply. Case is a recipient of a National Science 
Foundation ADVANCE 


formation grant to increase the participation 


institutional trans- 


of women in science and engineering. 


Indiana University Purdue 
University-Indianapolis 
Department of Computer and 
Information Science 
The Department of 


Information Science invites applications for a 


Computer and 


tenure track position at the Assistant 
Professor level, beginning August 2008. 
Applicants must hold a Ph.D. in Computer 
Science or closely related field at time of 


appointment, and are expected to develop a 


az Windows 


Windows Kernel Source and Curriculum Materials for 
Academic Teaching and Research. 


The Windows Academic Program from Microsoft provides the materials you 
need to integrate Windows kernel technology into the teaching and research 


of operating systems. 


The program includes: 


+ Windows Research Kernel (WRK): Sources to build and experiment with a 
fully-functional version of the Windows kernel for x86 and x64 platforms, as 
well as the original design documents for Windows NT. 


* Curriculum Resource Kit (CRK): PowerPointe slides presenting the details 
of the design and implementation of the Windows kernel, following the 
ACM/IEEE-CS OS Body of Knowledge, and including labs, exercises, quiz 
questions, and links to the relevant sources. 


* ProjectOZ: An OS project environment based on the SPACE kernel-less OS 
project at UC Santa Barbara, allowing students to develop OS kernel projects 


in user-mode. 


These materials are available at no cost, but only for non-commercial use by universities. 


For more information, visit www.microsoft.com/WindowsAcademic 


or e-mail compsci@microsoft.com. 
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high-quality funded research program and be 
committed to excellence in teaching under- 
graduates and graduate students. 

Applications are accepted from candidates 
in all areas of computer science, though we are 
especially interested in candidates with 
expertise in the areas of biocomputing, data- 
bases and datamining, and network security. 
The application must consist of a letter of 
interest, curriculum vitae, and a statement of 
research direction and teaching interests. 
Applicants should also arrange for three let- 
ters of recommendation to be mailed directly 
to the Committee. 

The department is committed to achieving 
excellence through diversity. Applications and 
nominations of women, persons of color, 
applicants with disabilities, and members of 
other under-represented groups are desired. 

Send the materials to: Faculty Search 
Committee, Department of Computer and 
Information Science, IUPUI, 723 W. Michigan 
Street, SL 280, Indianapolis, IN 46202-5132. 
E-mail applications may be submitted to wit- 
tlief@cs.iupui.edu. Consideration of applica- 
tions will begin on February 15, 2008 and will 
continue until the position is filled. IUPUI is 
an EEO/AA Employer, M/F/D. For further 
information about the department, please visit 


hetp://www.cs.iupui.edu/. 


Deutsche Telekom AG 
Research Scientists 

Deutsche Telekom AG, Europe’s leading 
telecommunications company is opening sev- 
eral positions for Senior Research Scientists in 
the broad areas of Security, Networking, 
Systems and Human Interface. For details 
please visit the Jobs & Careers section at 
hetp://www.laboratories.telekom.com/. 


India 
Senior Researcher 
The call is open in research areas pursued at 
India in particular in complex systems, soft- 
ware security, simulation and virtual reality, 
modeling living systems. The chair holder is 
expected to lead a research program. 
hetp://www.India.fr/recherche/chaires_enseig 


nement/chaire_schneider.en.html 


Lamar University 
Department: Computer Science 
Contact Person: Lawrence J. Osborne E-Mail 
Address: cs_search@mail.cs.lamar.edu 
Applications are invited for at least one 
tenure-track position beginning in the sum- 
mer or fall of 2008. Requirements include a 
Ph.D. in computer science, strong commit- 
ment to teaching, and demonstrated research 
ability. The normal teaching load is 9 hours 
per semester, but the load is reduced for new 


Career Opportunities 


faculty and those with external funding. 
Candidates with expertise in database, HCI 
and graphics, visualization, and high perform- 
ance computing, Web intelligence, and sys- 
tems-related areas, but applicants in all areas 
of computer science will be seriously consid- 
ered. Rank and salary are commensurate with 
experience and credentials. 

Applications, including curriculum vitae, 
at least three letters of recommendation, one 
of which should address teaching qualifica- 
tions, and a cover letter should be sent to: 

Chair, Search Committee 

Department of Computer Science 
P.O. Box 10056 

Lamar University 

Beaumont, TX 77710 


Applications may be submitted electroni- 
cally http://dept.lamar.edu/humanresources/ 
facapp.pdf. Review of applications will begin 
immediately and will continue until the posi- 
tion is filled. 

Lamar is a comprehensive public university 
of more than 10,000 students in the Texas 
State University System. It is located in 
Beaumont, approximately 90 miles east of 
Houston and 30 miles from the Gulf of 
Mexico. Lamar is an Equal Opportunity 
Employer and applications from women and 
minorities are encouraged. More information 
can be found at heep://cs.lamar.edu. 


Lawrence Tech University 
Department of Computer Science 
The Department of Math and Computer 
Science at Lawrence Tech University seeks 
applicants for the position of Assistant 
Professor of Computer Science in August 
2008. The ideal candidate will have a Ph.D. in 
computer science and be committed to the 
development of undergraduate and profession- 
al graduate students through teaching and 
projects, and believe strongly in the value of 
both theory and application. Special consider- 
ation will be given to candidates with expert- 
ise in the fields of intelligent systems or bioin- 
formatics, but all well-qualified candidates 
will be considered. Review of candidates will 
begin on January 15 and will continue until 
the position is filled. Applicants should email 
a cover letter, curriculum vitae, statement of 
teaching philosophy and research interests, 
and three letters of recommendation to: 
cssearch@Itu.edu If necessary, hard copies may 
be sent to: CS Search Committee Department 
of Math and Computer Science Lawrence 
Technological University 21000 West Ten 
Mile Road Southfield, MI 48075-1058 
www.ltu.edu/arts_sciences/ EOE, strongly 
encouraging applications from females and 


minorities 


Manhattan College 
Assistant Professor — Computer Science 
The 


Computer Science at Manhattan College seeks 


Department of Mathematics and 
a committed teacher-scholar with a Ph.D. in 
Computer Science for a tenure-track position 
at the assistant professor rank, beginning with 
the Fall 2008 semester. Candidates will be 
evaluated on their academic background, 
communication skills, and their potential for 
excellence in teaching and scholarly activity 
and, service to the college. 

Please send a statement of interests with a 
detailed curriculum vita with names of three 
references. Minimum two of the references 
should comment on teaching ability. Please 
send to: Dr. Carol M. Hurwitz, Chairperson, 
Department of Mathematics and Computer 
Science, Manhattan College, Riverdale, NY 
10471 by April 15, 2008. 

Manhattan College is an 
Catholic 
Lasallian tradition located in the Riverdale 


independent 


co-educational institution in the 
section of NYC. We expect our faculty, 
administration and staff to be knowledgeable 
about our mission and to make a positive con- 


tribution to that mission. We are committed 


to a diverse campus community. Women and 


minorities encouraged to apply. AA/EO 


Employer M/F/D/V 


Michigan Technological 
University 

Computer Network Systems 
Michigan Technological University’s School of 
Technology invites applications for a faculty 
position in the Computer Network Systems 
Administration (CNSA) program. starting 
2008. 
instructing undergraduate and graduate stu- 
dents in CNSA and related programs. 
Information about the School of Technology, 


August Primary responsibility is 


along with the curriculum, course descrip- 
tions and the complete announcement, can be 
found on-line at: hetp://www.tech.mtu.edu/. 


Middlebury College 
Dean of Library and Information 
Services 

Middlebury College is looking for an individual 
with exceptionally broad vision, an awareness of 
international educational developments and 
strong leadership skills to assume the position of 
Dean of Library and Information Services. 


* For More Information Contact: 


JONATHAN JUST 
jonathan.just@acm.org 


Advertising in Career Opportunities 


* How to Submit a Classified Line Ad: Send an e-mail to 

jonathan.just@acm.org. Please include text, and indicate the issue/or 

issues where the ad will appear, and a contact name and number. 

* Estimates: An insertion order will then be e-mailed back to you. The ad 

will by typeset according to CACM guidelines. NO PROOFS can be sent. 

Classified line ads are NOT commissionable. 

* Rates: $295.00 for six lines of text, 40 characters per line. $80.00 for 

each additional three lines. The MINIMUM is six lines. 

* Deadlines: Five weeks prior to the publication date of the issue (which is 

the first of every month). Latest deadlines: http://www.acm.org/publications 

* Career Opportunities Online: Classified and recruitment display ads 

receive a free duplicate listing on our Web site at: 
http://campus.acm.org/careercenter 

Ads are listed for a period of six weeks. 
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Committed to educating students in the 
tradition of the liberal arts, Middlebury 


College is unique among leading liberal arts 
institutions in that it also offers graduate and 
specialized programs operating around the 
world. These programs include the summer 
Language Schools, the C.V. Starr Middlebury 
Schools Abroad (30 sites in 12 countries), the 
Bread Loaf School of English and the Bread 
Loaf Writers’ Conference, as well as the 
Monterey Institute of International Studies, 


Middlebury’s affiliate in California. 

Informed by the College’s educational mis- 
sion and guided by the goals and objectives 
established by the College’s strategic plan, the 
Dean of Library and Information Services 
Represents LIS to the college’s academic com- 
munity, other service departments, the admin- 
istration and the local community. 
Develops organizational models for LIS, sets 
strategic priorities for addressing library and 
computing facilities needs and establishes per- 
formance goals that incorporate staff develop- 
ment and training. 

Recommends budget and allocates 
resources to meet the needs of the community. 
Oversees integration and support of sites 
abroad as well as summer programs and the 
Monterey Institute of International Studies. 

As a member of President's Staff and the 
Academic Affairs Committee, the Dean con- 
tributes to college-wide policy-setting and 
strategic planning by bringing to these dis- 
cussions both functional expertise (as Leader 
of LIS) as well as a broad perspective regarding 
the liberal arts and higher education. The 
Dean 


Trustees Technology Committee and serves as 


coordinates and assists a Board of 
a voting member of the faculty. 
The hold a MS in 


Library/Information Science and/or Computer 


ideal candidate will 


Science; a Ph.D. is preferred. Strong leader- 
ship experience, collaboration and decision- 
making skills. Proven written and oral com- 
munication skills. Extensive management and 
planning experience, including management 
of both human and financial resources. In- 
depth knowledge of scholarly communication, 
academic library services and information 


technologies. Broad and thorough knowledge 
of the academic enterprise. Active support of 
diversity initiatives, demonstrated ability to 
recruit, hire, retain and manage a diverse 
workforce and to promote a diverse work envi- 
ronment through education, training and pro- 
fessional development. 

Review of applications will start February 
Ist, 2008, and will continue until the position 
has been filled. 

Interested applicants please apply on-line 
via our website: 

heep://go.middlebury.edu/jobs 


Please call Human Resources at (802) 
443-5465 for assistance. 

Middlebury College is committed to hiring 
a diverse faculty and staff to complement the 


increasing diversity of our student body. 


Mississippi State University 
Head 
Department of Computer Science and 
Engineering 

Applications and nominations are being 
sought for the Head of the Department of 
Computer Science and Engineering (www.cse. 
msstate.edu) at Mississippi State University. 
This is a 12-month tenure-track position. 

Part of the Bagley College of Engineering, the 
department has approximately 325 undergradu- 
ate majors, 70 graduate students, and 18 tenured 
and tenure-track faculty. The department offers 
undergraduate programs in Computer Science 
and Software Engineering, and jointly adminis- 
ters the undergraduate program in Computer 
Engineering with the Department of Electrical 
and Computer Engineering. At the graduate 
level, we offer M.S. and Ph.D. degrees in 
Computer Science and faculty also direct gradu- 
ate students in Computational Engineering and 
Computer Engineering. Certificates in Software 
Engineering, Information Assurance, and 
Computational Biology are also available. 
Research expenditures total about $3 million 
dollars annually and the university as a whole is 
ranked 48th among 271 U.S. institutions in 
computer science expenditures. Research areas 


for the department are high-performance com- _ 


puting, artificial intelligence, graphics and visu- 
alization, computer security, and software engi- 
neering. Three current faculty members have 
received NSF CAREER awards. Our computer 
security area has been designated a National 
Center of Academic Excellence in Information 
Assurance Education (CAEIAE) by the National 
Security Agency (NSA). 

Mississippi State University is a comprehen- 
sive land-grant institution with approximately 
17,000 students and about 1,000 faculty 
members. The university is a leader in high 
performance computing, housing a supercom- 
puter in the top 20 among U.S. universities. 
The university's main campus is located in 
Starkville, Mississippi, a vibrant community 
approximately 2 hours from Jackson MS, 
Birmingham AL, and Memphis TN. 


The successful Head will provide: 

¢ Vision and leadership for nationally rec- 
ognized computing education and research 
programs 

¢ Exceptional academic and administrative 
skills 

e A strong commitment to faculty recruit- 
ment and development 
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Applicants must have a Ph.D. in computer 
science, software engineering, computer engi- 
neering, or a closely related field. The success- 
ful candidate must have earned national 
recognition by a distinguished record of 
accomplishments in computer-science educa- 
tion and research. Demonstrated administra- 
tive experience is desired, as is teaching expe- 
rience at both the undergraduate and graduate 
levels. The successful candidate must qualify 
for the rank of professor. 

Please provide a letter of application outlin- 
ing your experience and vision for this posi- 
tion, a curriculum vita, and names and contact 
information of at least three professional refer- 
ences. Application materials should be sub- 
mitted online at 

hetp://www.jobs.msstate.edu/ 


Screening of candidates will begin February 
22, 2008 and will continue until the position 
is filled. Mississippi State University is an 
AA/EOE institution. Qualified minorities, 
women, and people with disabilities are 
encouraged to apply. 


Mississippi State University 
Faculty Position in Computational 
Biology 
The Department of Computer Science and 
Engineering (http://www.cse.msstate.edu) 
invites applications for a tenure-track faculty 
position at the Assistant or Associate Professor 
level in the area of computational biology. 
Candidates for the position are expected to 
hold a Ph.D. in computer science, computa- 
tional biology, or a closely related field (ABDs 
may be considered). The person filling this 
position will be affiliated with the MSU 
Institute for Digital Biology (IDB), a univer- 
sity-level multi-disciplinary research institute 
that merges MSU's strengths in engineering 
and biology to solve problems related to 
health, nutrition, biofuels, food safety, bio- 
security and agriculture. IDB faculty are cur- 
rently funded by NSE, USDA, DOD, NIH, 
and DOE. MSU has a state-of-the art facility 
for genomics and proteomics (the Life Science 
and Biotechnology Institute). Research areas 
within the department include high perform- 
ance computing, artificial intelligence, graph- 
ics and visualization, computer security, and 

software engineering. 

Mississippi State University is the largest 
university in the State of Mississippi with 
approximately 1000 faculty and 17,000 stu- 
dents. The Department of Computer Science 
and Engineering has 18 tenured and tenure- 
track faculty and offers academic programs 
leading to the B.S., M.S. and Ph.D. in 
Computer Science, and a B.S. in Software 
Engineering. The department offers a certifi- 


Career Opportunities 


cate in Computational Biology and jointly 
B.S. in Computer 
Engineering. Faculty also direct Ph.D. stu- 


administers the 


dents in Computational Engineering and 
Computer Engineering and work with a num- 
ber of additional on-campus research centers 
including the High Performance Computing 
Collaboratory, the Institute for Neurocognitive 
Science and Technology, and the Sustainable 
Energy Center. Seven faculty members in the 
department have been recognized by NSF 
CAREER awards. Department research expen- 
ditures total around three million dollars per 
year. Mississippi State University is ranked 
48th among 271 U.S. institutions in R&D 
expenditures in engineering by the National 
Science Foundation. 

Please provide a letter of application, a cur- 
riculum vita, research and teaching statements, 
and names and contact information of at least 
three professional references. Application mate- 
rials should be submitted online at 
hetp://www.jobs.msstate.edu/, or emailed to 
office@cse.msstate.edu. Screening of candidates 
will begin February 28, 2008 and will contin- 
ue until the position is filled. Mississippi State 
University is an AA/EOE institution. Qualified 
minorities, women, and people with disabili- 


ties are encouraged to apply. 


Missouri University 
Department of Computer Science 
The Department of Computer Science at the 
Missouri University of Science and 
Technology is seeking outstanding applicants 
The 


Science and 


for tenure-track faculty positions. 


Missouri University of 
Technology is the primary science and engi- 
neering campus of the Missouri University 
system. Detailed information is available at 
heep://hr.mst.edu/employment/compsci.html. 


(Formerly University of Missouri-Rolla) 


Moravian College 
Department of Computer Science 
Moravian College invites applications for a 
one-year position at the assistant professor or 
instructor level in computer science to begin 
Fall 2008, with the possibility of a tenure- 
track position to begin Fall 2009. Preference 
will be given to applicants with a Ph.D. in 
computer science, but applicants with a M.S. 
in computer science will also be considered. 
Applicants should have a broad range of com- 
puter science expertise and interests. The suc- 
cessful candidate will have strong interperson- 
al skills and a primary commitment to under- 
graduate teaching and scholarship for comput- 
er science in a liberal arts context. Teaching 
responsibilities will include undergraduate 
courses for the computer science major as well 
as courses for non-majors. Moravian College 


faculty are encouraged to participate in inter- 
disciplinary teaching. Moravian College values 
diversity and encourages individuals from 
under-represented groups to apply. Review of 
applications begin February 20. 
Applications should include resume, tran- 


will 


scripts, a statement of teaching philosophy, 
and three letters of recommendation, and 
should be sent to Kay Somers, Chair, 
Department of Mathematics and Computer 
Science, Moravian College, 1200 Main Street, 
Bethlehem, PA 18018-6650. 


Mount Holyoke College 
Assistant Professor 
Mount Holyoke College has a one-year position 
for a full-time, visiting assistant professor in any 
area of specialization. We are seeking someone 
with a strong interest in teaching and working 
closely with undergraduate students. Ph.D 
must be completed by September 2008. 
Teaching experience is required. The teaching 
load will comprise two courses per semester. 
Mount Holyoke is an Affirmative Action, Equal 
Opportunity Employer. Review of applications 
will begin January 15 and continue until the 
position is filled. Candidates should submit CV, 
research description, and teaching statement 
online at hetp://jobsearch.mtholyoke.edu. 
Arrange for three letters of reference to be sent 
directly to human-resources@mtholyoke.edu or 
Mount Holyoke College, 50 College Street, 1 
Skinner Hall, South Hadley, MA 01075, atten- 
tion Computer Science Visitor Search. At least 
one recommendation letter should address 


teaching experience. 


Purdue University 

Tenure Track Positions 

Development and 
Systems Purdue 


Application Software 
Database 
University’s Department of Computer and 
College — of 


Management 
Information Technology, 
Technology, invites applications for 2 tenure- 
track positions beginning in August 2008 in 
the following areas: Application Software 
Development: This position’s focus is in the 
area of application software development 
using contemporary programming languages, 
development tools and methodologies. 
Preference will be given to candidates who 
have teaching experience, publishing experi- 
ence, an earned doctorate in a related field, 
and experience developing application soft- 
ware at all levels of the enterprise including 
desktop, client/server, web, and multi-tier 
enterprise applications using Java and/or 
Microsoft.NET technologies and a relational 
database management system such as Oracle 
or Microsoft SQL Server. 

Database Management Systems: The data- 
base position is focused on areas of database 


design and administration, database program- 
ming and advanced database applications. 
Preferred candidates will have academic 
and/or industry experience in one or more of 
the following: enterprise database design, 
development and management; object-orient- 
ed analysis and design; data warehousing and 
data mining; special purpose databases; and 
enterprise level database infrastructure. 

Please go to http://www.tech.purdue.edu/ 
cit/positions for more information on all 
available positions. 

Purdue University is an Equal Opportunity 


/Equal Access/Affirmation Action Employer 


Seattle University 

Chair of Department of Computer 

Science and Software Engineering 
Seattle University invites applications for the 
position of Chair of the Department of 
Computer Science and Software Engineering 
to begin on July 1 of 2008. Applicants are 
required to have a Ph.D. in Computer Science, 
Software Engineering, or other closely allied 
field. Candidates should have experience as a 
tenured professor, program director, or depart- 
ment chair and be capable of leading a young 
and dynamic department and teaching a broad 
range of software engineering and/or comput- 
er science courses. Opportunities for industri- 
al collaborations abound in the Seattle area, 
home to hundreds of software, Internet, and 
telecommunications companies. 

Please visit http://www.seattleu.edu/sci- 
eng/comsci/ for more information about the 
position and how to apply. 

Seattle University, founded in 1891, con- 
tinues a more than four hundred and fifty year 
tradition of Jesuit Catholic higher education. 
The University’s Jesuit Catholic ideals under- 
score its commitment to the centrality of 
teaching, learning and scholarship, of values- 
based education grounded in the Jesuit and 
Catholic traditions, of service and social jus- 
tice, of lifelong learning, and of educating the 
whole person. Located in the heart of dynam- 
ic Seattle, the University enrolls approximate- 
ly 7,200 undergraduate and graduate students 
in eight colleges and schools. Students enjoy a 
university ethos characterized by small classes, 
individualized faculty attention, a strong 
sense of community, a commitment to diver- 
sity, and an outstanding faculty. 

Seattle University is an equal opportunity 
employer. 


Spatial Corp. 
Software Engineer 
SPATIAL CORP. is a wholly owned company of 
Dassault Systemes and the industry leader in the 
development of open, component-based 3D 
modeling technology for CAD/CAM/CAE 
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applications and interoperability solutions. In 


this position, you will be involved with all stages 
of the software product life cycle for various C + + 
software products. You will be a part of a close- 
ly-knit team that supports the daily build, test, 
and release cycle of our products. Because a 
strong focus of the position is on creating new 
processes, the ideal candidate will be energetic, 
creative, and a proficient troubleshooter, yet also 
not mind the day-to-day activity of monitoring 
builds and tests. Your responsibilities will 
include but not be limited to: 

¢ Scheduling and monitoring daily builds 
and tests 

e Maintaining and improving the build 
and test infrastructure 

¢ Developing and supporting processes 
required for the software product life cycle 


Qualifications: 
BS in Computer Science or other engineering 
degree with computer science emphasis 


Required Skills: 

¢ Knowledge of multi-platform environ- 
ments: Windows, Unix 

¢ Knowledge of a source code control sys- 
tem such as CVS 

© C/C++ 

* Scripting tools: perl, shell batch 

¢ SQL experience, preferably MySQL 

¢ Capacity to switch quickly from one task 
to another 

¢ Good 
skills 


communication and teamwork 


Desired Skills: 

e 2-3 years professional experience in an 
Integration or QA group 

e Java 


Spatial Corp. is an equal opportunity 
employer with competitive salaries and an 
excellent benefits package. Please visit our 
website at http://www.spatial.com/ 


Technical University Berlin 
Professorship Service Centric 
Networking 
Technical University Berlin in cooperation with 
Deutsche Telekom Laboratories invites applica- 
tions for a Professorship (W2) for 5 years in 
“Service Centric Networking”. For details see 
http://www. laboratories.telekom.com/ipws/ 
English/LabsGeneral/Karriere/Wissenschaftliche 

Mitarbeit/Pages/IV-699-Professor.aspx 


Technical University Berlin 
Professorship Security in 
Telecommunications 
Technical University Berlin in collaboration 
with Deutsche Telekom Laboratories invites 


applications for a Tenured Full Professorship 
(W3) “ Security in Telecommunications”. For 
details see hetp://www.laboratories.telekom. 
com/ipws/English/LabsGeneral/Karriere/ 
WissenschaftlicheM itarbeit/Pages/IV-542- 
Professor.aspx 


The American University of 
Afghanistan 
Assistant Professor of Information 
Technology 
The American University of Afghanistan is 
seeking interested candidates for faculty posi- 
tions in Information Technology. We offer a 
unique opportunity to teach and work in a 
newly formed university located in Kabul. 
Since our first students enrolled in March 
2006 the University is growing steadily, 
enrolling a new group of entering undergrad- 
While the 
University has offered thus far several intro- 


uate students each semester. 


ductory IT courses, beginning with the Fall 
semester of 2008 the IT program will be 
expanding into a major course of study. 
The successful applicant will demonstrate a 
commitment to undergraduate teaching and 
the ability to engage undergraduates in 
research and class projects. Teaching responsi- 
bilities include participation in our introduc- 
tory courses as well as upper level courses in 
the applicant’s areas of interest and expertise, 
including but not limited to computer net- 
works, databases, eCommerce & web develop- 
ment, programming languages, or operating 
systems. The teaching load per semester is 
four courses with no more than three course 
preparations. A Ph.D. or M.Sc. in a computer 
related area is required for this position. Salary 
and level of appointment commensurate with 
experience.Please see our website for descrip- 
tions of the faculty position and how to apply: 
www.auaf.edu.af 


The Hong Kong Polytechnic 
University 
Department of Computing 
The Department invites applications for 
Assistant Professors in most 
Computing, including but not limited to 
Software Engineering / Biometrics / Digital 
Entertainment / MIS and Pervasive Computing. 
Applicants should have a PhD degree in 
Computing or closely related fields, a strong 
commitment to excellence in teaching and 
research as well as a good research publication 
record. Initial appointment will be made on a 
fixed-term gratuity-bearing contract. Re- 
engagement thereafter is subject to mutual 
agreement. Remuneration package will be 
highly competitive. Applicants should state 
their current and expected salary in the applica- 
tion. Please submit your application via email to 
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areas of 


hrstaff@polyu.edu.hk. Application forms can be 
downloaded from  hetp://www.polyu.edu.hk/ 
hro/job.htm. Recruitment will continue until 
filled. 
University’s Personal Information Collection 


the positions are Details of the 
Statement for recruitment can be found at 
heep://www.polyu.edu.hk/hro/jobpics.htm. 


University at Albany, SUNY 
College of Computing and Information 
(CCl) 

The College of Computing and Information 
(CCI) of the University at Albany, SUNY, 
invites nominations and applications for up to 
six new tenure-track faculty positions in its 
three constituent departments: Computer 
Science, Informatics, and Information Studies. 

We seek a mix of computer scientists, infor- 
mation scientists, social scientists, and 
researchers in libraries, government, educa- 
tion, and other applicable environments. 
Candidates will be considered for appoint- 
ments at all levels and senior positions may 
have appointments in multiple departments. 

Applicants should have a Ph.D. or should 
have completed his/her Ph.D. by the starting 
date of appointment. The degree(s) must be 
from a college or university accredited by a 
U.S. Department of Education or internation- 
ally recognized accrediting organization. 
Applicants must have strong research creden- 
tials. We especially welcome candidates who 
would work across disciplines and provide 
linkages between departments. All applicants, 
regardless of discipline, should have an explic- 
it focus on the construction of effective com- 
puting and information systems and/or the 
use of information in diverse settings. 
Applicants must include in their application 
their ability to work with and instruct cultur- 
ally diverse groups of people. Faculty will par- 
ticipate in all levels of the College’s instruc- 
tional programs, from undergraduate through 
doctoral education. Priority will be given to 
applicants with a strong interest in helping 
develop these programs and the interplay 
between them. 

Details concerning the college's research 
portfolio and the search for new faculty mem- 
bers are available at http://www.albany.edu/ 
cci/portfolio.shtml 

Competitive salary and startup package, 
commensurate with experience. 

For a complete job description, please visit 
http://albany.interviewexchange.com/joboffer 
details.jsp?JOBID=8311 

For information about the College, please 
visit our website at http://www.albany.edu/cci. 

Apply online, using Interview Exchange at 
hetp://hr.albany.edu/content/faculvac.asp 

Application review will begin on February 
8, 2008; position open until filled. Position 


Career Opportunities 


available August 2008. 
The University at Albany is an 
EEO/AA/IRCA/ADA employer. 


University of Denver 
Department of Computer Science 
Faculty Position 
We invite applications for a tenure-track fac- 
ulty position at the Assistant Professor level to 
begin Fall 2008. Exceptional candidates at 
other ranks will be considered as well. The 
minimum requirements are a PhD in CS ora 
related area by the time the appointment 
begins and demonstrated ability in research 
and teaching. The department is particularly 
interested in a candidate who can teach and 
direct research in the following areas: enter- 
tainment computing; interactive simulations 
and games; trustworthy computing (net- 
works, security, privacy, fault tolerance); and 
systems and software engineering. The suc- 
cessful candidate is expected to participate 
fully in the department through an active 
research program, excellent teaching, and 

dedicated service. 

The Computer Science Department is part 
of the School of Engineering and Computer 
Science (SECS) at the University of Denver. 
SECS promotes research and teaching collabo- 
rations among different disciplines. Faculty in 
Computer Science have unique opportunities 
for cross-disciplinary collaboration. For fur- 
ther information, visit the SECS website at 

Our current faculty’s research interests 
include algorithms, computer security, data- 
base systems, distributed systems and algo- 
rithms, graphics, networking and games, per- 
formance modeling, programming languages, 
and software engineering. We offer bachelor’s, 
master's and doctoral degrees. 

The University of Denver is a medium-size 
(11,000 students) private university. Class 
sizes are small, the teaching load is moderate 
and the salary is competitive. The university is 
located in an attractive residential area 5 miles 
from downtown Denver. Denver, with its 
metro area population of 2.3 million, is con- 
sistently ranked as one of the country’s top five 
most pleasant places to live. Many of the 
country’s best ski areas, mountain bike trails, 
and the 14,000 foot peaks of the Colorado 
Rockies are only one or two hours away. 

The University of Denver is committed to 
enhancing the diversity of its faculty and staff 
and encourages applicants particularly from 
women, minorities and the disabled. 

Application screening will begin immedi- 
ately and continue until the position is filled. 
Applicants should submit a curriculum vitae, 
a statement of teaching and research interests 
and have at least 3 reference letters sent to 
www.dujobs.org. 


The University of Denver is an AA/EOE. 
Applicants should apply online at and pro- 
vide: (1) position applying for; (2) curriculum 
vitae; (3) three references with contact infor- 
mation; (4) statement of research vision; and 
(5) statement of teaching interests. 


University of lowa 
Computer Science Department 
Faculty Position 
Fall 2008 
The Computer Science Department seeks 
applications for one tenure-track assistant pro- 
fessor position commencing August 2008. 
Applications from all areas of computer sci- 
ence and informatics are invited. We also wel- 
come applicants doing research at the frontiers 
of computing in connection with other disci- 
plines. The Department offers BA, BS, and 
PhD degrees in Computer Science, and in Fall 
2007 added BA and BS degrees in Informatics 
(see hettp://www.cs.uiowa.edu/Informatics). 
Candidates must hold a PhD in computer sci- 
ence, informatics, or a closely related disci- 
pline. Applications received by January 15, 
2008, 
Applications should contain a CV, research, 


are assured of full consideration. 
and teaching statements. Please have three let- 
ters of recommendation sent directly to us 
(pdf email preferred). 


Apply: 
Via the Web at 
hetp://www.cs.uiowa.edu/hiring/ 


Or by email to cs_hiring@cs.uiowa.edu 


Or by U.S. mail to: 

Faculty Search Committee 
Computer Science Department 
University of lowa 

14 MacLean Hall 

Iowa City, IA 52242-1419 


The University of Iowa is an affirmative 
The 
Department and the College of Liberal Arts 


action/equal opportunity employer. 
and Sciences are strongly committed to diver- 
sity and maintain ties to programs on campus 
that provide a supportive environment for 
women and minorities, such as the Women in 
Science and Engineering program. The strate- 
gic plans of the University, College, and 
Department reflect this commitment to 
diversity. 


University of the 
District of Columbia 
School of Engineering and 
Applied Sciences 
The University of the District of Columbia is 
a comprehensive urban land-grant institu- 


tion and is classified as a Historically Black 
College and University. The School of 
Engineering and Applied Sciences invites 
nominations and applications for the posi- 
tion of Chair, Department of Computer 
Science and Information Technology. 
Candidates must have an earned doctorate in 
Computer Science or closely related field and 
a strong record of teaching, research, and 
scholarly with 


appointment at the rank of associate profes- 


activities commensurate 
sor or professor. Demonstrated knowledge 
and experience with ABET accreditation and 
with the Computing Accreditation 
Commission of ABET in particular is 
required. Candidates should have a strong 
commitment to undergraduate and graduate 
teaching. The successful candidate must have 
exceptional interpersonal communication 
and management skills necessary to promote 
programs and to sustain strong student 
enrollment. Experience with budget devel- 
opment and control is required. In addition 
to the BS programs in Computer Science and 
Information Technology, the School offers 
ABET-accredited BS degree programs in 
Civil, Electrical, and Mechanical 
Engineering, as 
Aerospace Technology and Architecture. 


well as programs in 
Candidates should send a letter attesting to 
their qualifications for the position, a current 
curriculum vitae, and names and contacts for 
at least three professional references to Ms. 
Mavis I. Johnson, Staff Assistant, Office of 
the Dean, School of Engineering and Applied 
Sciences at E-mail mijohnson@udc.edu. The 
position will remain open until filled. The 
University of the District of Columbia is an 
equal opportunity employer. 


Widener University 
Computer Science Department 
Widener University seeks candidates for a 
tenure-track position as Assistant Professor 
in the Computer Science Department begin- 
ning September 2008. Demonstrated excel- 
lence in teaching is required. A Ph.D. in 
Computer Science is preferred. Candidates 
with any area of specialization will be consid- 
ered, although teaching experience in operat- 
ing systems is preferred. Candidates should 
send a letter of application, a curriculum 
vitae, and three letters of recommendation 
sent to: Dr. Suk-Chung Yoon, Chair, Dept. of 
Computer Science, Widener University, One 
Chester, PA 19013. 
Questions may be directed via e-mail to: 


University Place, 


syoon@mail.widener.edu Applications will 
be considered as soon as they are complete 
and the position remains open until filled. 
Widener University encourages women and 
minorities to apply. 
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NANYANG 
efasery | TECHNOLOGICAL 


S/ UNIVERSITY 


Faculty 


with the School Of Computer Engineering, 
g Technological University 


g gineering, the School of Computer Engineering (SCE) originated 
from the School of Applied Science that was established in 1988. Recognising the rapid growth 
in the information technology arena, SCE was formed in 2000. It offers undergraduate training 
leading to BEng (Hons) in Computer Engineering or Computer Science as well as full-time 
and part-time graduate training leading to MSc and PhD. SCE’s strengths lie in constantly 
maintaining industrial relevance in its training of undergraduate and graduate students, as well 
as pioneering innovative cutting-edge research. Further information about the school can be 
obtained at http://www.ntu.edu.sg/sce. 


Applications are invited for appointment as Assistant Professor. High-calibre applicants 
who possess a PhD and with a proven track record in research and teaching at university level 
are invited to apply for suitable appointments in the following areas: 


¢ Post 1: Information Retrieval (particularly in text/web search, text/web classification, 
information extraction, text mining) or Information Security (particularly in database 
and system security, data privacy, digital rights management, trust management) 


¢ Post 2: Databases (particularly in semi-structured databases, distributed databases, 
data warehousing, web services, XML, workflows, data integration, metadata management, 
multimedia databases) 


¢ Post 3: Multimedia Understanding (particularly in large-scale multimedia 
| retrieval, multimodality knowledge discovery, ontology and semantic web multimedia 
understanding) 


Candidates for appointment at the Assistant Professor level must demonstrate strong 
research potential and a willingness and ability to teach at the undergraduate and graduate 
levels. Successful candidates are expected to carry out research in one of the research 
centres hosted by the School. They are also expected to teach courses in the BEng, MSc and 
PhD programs offered by the school. 


Informal enquiries about the posts can be made to H-DISY@ntu.edu.sg (Posts 1 & 2) 
or H-DCC@ntu.edu.sg (Post 3). Submission of application forms can be made to 
| VD-SCE-ACAD@ntu.edu.sg. Guidelines for application submission and application forms 
can be obtained from http:/Iwww.ntu.edu.sg/hr/AppInforms.htm. 


Closing Date: 15 May 2008 or until the positions are filled. 
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ACM’S JOB CENTER 


We are excited to 
announce our new Career 
and Job Center featuring a 
highly targeted focus on job 

opportunities in the 

computing industry. 


ACM members can access 
a host of exclusive 
career-enhancing benefits 
including: 


Access to hundreds of 
corporate job postings not 
seen on commercial sites. 


Resume posting, allowing 
you to stay connected to 
the employment market. 


Live career advice available 
to assist you in resume 
development, creating 
cover letters, company 
research, negotiating an 
offer, and more. 


http://campus.acm.org/ 
careercenter 


PAUL WATSON 


ACM's calendar policy is to list open computer science meetings that are Sponsor by ACM, sister societies, or other scientific, 
technical or educational tax-exempt organizations. Educational seminars, institutes, and courses are not included due to space 
limitations. Listings for conferences NOT Sponsor by ACM should include the title of the conference, Sponsor organization, a 
contact name and full address. Phone number, email address, URL and/or fax numbers are optional. Please address to: Calendar 
Items, CACM, 2 Penn Plaza, New York, NY 10121-0701; fax: (212) 869-0481; email: calendar@acm.org. For Conferences and 
Workshops Sponsor or cosponsored by ACM, the calendar listing should be included with the initial documents submitted for 
approval to ACM. All requests for ACM sponsorship or cooperation should be addressed to: Conference Coordinator, ACM 
Headquarters, 2 Penn Plaza, New York, NY 10121-0701; (212) 626-0602; email: SIGS@acm.org. The Technical Meeting Request 
Form (TMRF) for this purpose can be obtained from the Conference Coordinator. The TMRF should be submitted at least nine 
months in advance of the event to ensure time for processing the approval and to accommodate lead-time for CACM listings. 


The ACM calendar and calls can also be accessed on-line via the URL http://www.acm.org/events/coe.html. For further details 


please contact webmaster@acm.org. 


Conferences receiving ACM sponsorship/co-sponsorship or cooperation are noted in boldface. 


2008 


March 12-15 
HRIP’08: INTERNATIONAL CONFERENCE ON 
HUMAN ROBOT INTERACTION Amsterdam, 
Netherlands, Sponsored: SIGCHI, SIGART, 


Contact: Kerstin =Dautenhahn, Email: 
k.dautenhahn @herts.ac.uk 

March 12-15 
THE 39TH ACM ~— TECHNICAL 


SYMPOSIUM ON COMPUTER SCIENCE 
EDUCATION Portland, OR, Sponsored: 
SIGCSE, Contact: John P Dougherty, Phone: 
610-896-4993, Email: jd@cs.haverford.edu 


March 13-14 
INTERNATIONAL WorKSHOP ON 
SOFTWARE AND COMPILERS FOR 


EMBEDDED SYSTEMS Munich, Germany, 
Contact: Heiko Falk, Email: heiko.falk@udo.edu 


March 13-17 
THIRD INTERNATIONAL CONFERENCE 
ON Bopy AREA NETWORKS Tempe, AZ, 
Contact: Sethuraman Panchanathan, Phone: 
480-965-3699, Email: panch@asu.edu 


March 16-20 
THE 2008 ACM Symposium ON 
APPLIED COMPUTING Fortaleza, Ceara 
Brazil, Contact: Roger L. Wainwright, Phone: 
918-631-3143, Email: rogerw@utulsa.edu 


March |7-20 
FOURTH INTERNATIONAL CONFERENCE 


ON TESTBEDS AND RESEARCH INFRA- 
STRUCTURES FOR THE DEVELOPMENT OF 
Networks & COMMUNITIES AND 
WoOrRKSHOPS Innsbruck, Austria, Contact: 
Miguel Ponce de Leon, Phone: 353 51 302953, 


Email: miguelpd!@tssg.org 


March 26-28 
EYE TRACKING RESEARCH AND APPLICA- 
TIONS Savannah, GA, Sponsored: SIG- 
GRAPH, SIGCHI, Contact: Kari-Jouko Rajha, 
Phone: 358-3-35516952, Email: kkr@cs.uta.fi 


March 28-29 
ACM SouTHEAST REGIONAL CON- 
FERENCE Auburn, AL, Contact: James H. 
Cross II, Phone:334-844-6315, 
cross@eng.auburn.edu 


Email: 


March 31- April 2 
WISEC’08: First ACM CONFERENCE 
ON WireELess NeETWoRK SECURITY 
Alexandria, VA, Sponsored: SIGSAC, Contact: 
Virgil Gligor, Phone: 301-405-3642, Email: 


gligor@umd.edu 


March 31- April 4 
7TH ANNUAL’ AsPECT-ORIENTED 
SOFTWARE DEVELOPMENT CONFER- 
ENCE Brussels, Belgium, Contact: Theo 
D'Hondt, Email: tidhondt@vub.ac.be 


April |-4 
Eurosys 2008 CONFERENCE Glasgow 
Scotland UK, Sponsored: SIGOPS, Contact: 


Joseph S Sventek , Phone: 44 141 330 8078, 


Email: joe@dcs.gla.ac.uk 
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April 4-5 
CONSORTIUM FOR COMPUTING SCI- 
ENCES IN COLLEGES (CCSC) Mip- 
SOUTH Russellville, AZ, Contact: James R 


Aman, Phone: 773-298-3454, Email: 
aman @sxu.edu 

April 4-8 
SIGUCCS 08 MANAGEMENT 


SYMPOSIUM Tucson, AZ, Contact: Stephanie 


Smith, Email: smith_s@hq.acm.org 


April 5-10 
CHI CONFERENCE ON WHUMAN 
Factors IN COMPUTING SYSTEMS 


Florence, Italy, Contact: Mary Czerwinski, 
425-703-4882, 
microsoft.com 


Phone: Email: marycz@ 


April 5-6 
INTERNATIONAL WORKSHOP ON SYSTEM 
LEVEL INTERCONNECT PREDICTION 
Newcastle, UK, Contact: Ion I Mandoiu, Phone: 
404-429-4689, Email: ion@engr.uconn.edu 


April 9-13 
INTERNATIONAL CONFERENCE ON 
VIRTUAL REALITY Laval, France, Contact: Jean- 
Francois Fontaine, Email: jffontaine@laval-virtu- 


al.org 


April 13-16 
INTERNATIONAL SYMPOSIUM ON 
PHYSICAL DESIGN Portland, OR, Contact: 
David Pan, Phone: 512-471-1436, Email: 


dpan@ece.utexas.edu 
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April 13-16 
SPRING SIMULATION MULTICONFERENCE 
Ottawa, ON, Contact: Hassan Rajaei, Phone: 
419-372-2002, Email: rajaei@cs.bgsu.edu 


April 14-15 
EurocraPHics 2008 Symposium ON 
PARALLEL GRAPHICS AND  VISUAL- 
IZATION Crete, Greece, Contact: Daniel 
Weiskopf, Phone: 49-711-7816-368, Email: 


weiskopf@vis.uni-stuttgart.de 


April 14-16 
FLOPS08: 9TH INTERNATIONAL SyYM- 
POSIUM ON FUNCTIONAL AND LoGic 
PROGRAMMING Ise, Japan, Contact: Manuel 
V Hermenegildo, Phone: 34 91 336 7435, 
Email: herme@fi.upm.es 


April 18-19 
CONSORTIUM FOR COMPUTING SCIENCES 
IN CoLLeGes (CCSC) SOUTH CENTRAL 
Corpus Christi, TX, Contact: James R Aman, 
Phone: 773-298-3454, Email aman@sxu.edu 


April 21-25 
Wwwoe: THE 17TH INTERNATIONAL 
Wor_p WIDE WEB CONFERENCE Bei- 
jing, China, Contact: Yih-Farn Robin Chen, 
Phone: 973-360-8653, 
chen @research.att.com 


Email: 


May 4-6 
GREAT LAKES SymPosiUM ON VLSI 
2008 Orlando, FL, Sponsored: SIGDA, Con- 
tact: Vijay Email: 


Narayanan, vijay @ 


cse.psu.edu 


May 5-7 
CF ’08: COMPUTING FRONTIERS CON- 
FERENCE Italy, Alex 
Ramirez, Email: alex.ramirez@bsc.es 


Ischia, Contact: 


May 5-8 
FMX08: 13TH INTERNATIONAL CON- 
FERENCE ON ANIMATION, EFFECTS, RE- 
ALTIME AND CONTENT Stuttgart, Germany, 
Contact: Thomas Haegele, Phone: 490-714- 
1969-800, 
Thomas. haegele@filmakademie.de 


Email: 


May 10-18 
INTERNATIONAL CONFERENCE ON SOFT- 
WARE ENGINEERING Leipzig, Germany, Con- 
tact: Wilhelm Schaifer, Email: wilhlem@upb.de 


May 27-29 
THE INTERNATIONAL CONFERENCE ON 
ADVANCED VISUAL INTERFACES Naples, 
Italy, Contact: Stefano Ledialdi, Phone: 39-6- 
88-41962, 
di.uniromal .it 


Email: levialdi@ 


Calendar of Events 


June 9-12 
INTERNATIONAL CONFERENCE ON MAN- 
AGEMENT OF DATA Vancouver, Canada, Spon- 
sored: SIGMOD, Contact: Laks V.S. Lakshmanan, 
Phone:604-822-3153, Email: laks@cs.ubc.ca 


June 11-13 
IDCO8: 7TH INTERNATIONAL CON- 
FERENCE ON INTERACTIVE DESIGN AND 
CHILDREN Chicago, IL, Contact: Justine Cas- 
Phone: 847-491-3534, 
tine@media.mit.edu 


sell, Email: jus- 


June 15-20 
JCDL ’08: JoINT CONFERENCE ON Dic- 
ITAL LIBRARIES Pittsburgh, PA, Contact: 
Ronald Larsen, Phone: 412-624-5139, Email: 
rlarsen@pitt.edu 


June 18-20 
IEA/AIE-2008: 21st INTERNATIONAL 
CONFERENCE ON INDUSTRIAL, ENGI- 
NEERING, & OTHERAPPLICATIONS OF Ap- 
PLIED INTELLIGENT SYSTEMS 
Wroclaw, Poland, Contact: Moonis Ali, Email: 
ma04@rxstate.edu 


June 19-21 
19TH ACM CONFERENCE ON HYPER- 
TEXT AND HYPERMEDIA Pittsburgh, PA, 
Sponsored: SIGWEB, Contact: Dr. 
Phone:412-6249404, 
peterb@pitt.edu 


Peter 


Brusilovsky, Email: 


June 21-25 
THE 35TH ANNUAL INTERNATIONAL 
SYMPOSIUM ON COMPUTER ARCHI- 
TECTURE Beijing, China, Contact: Kai Li, Phone: 
609-258-4639, Email: li@cs.princeton.edu 
June 23-26 
WOSP ’08: WorRKSHOP ON SOFTWARE 
AND PERFORMANCE Princeton, NJ, Phone: 
908-615-4524, Email: beto5599@yahoo.com 
July 7-11 
EUROPEAN CONFERENCE ON OBJECT 
ORIENTED PROGRAMMING Paphos, Cyprus, 
Contact: Jan Vitek, Email: jv@cs.purdue.edu 


July 20-23 
INTERNATIONAL SYMPOSIUM ON 
SYMBOLIC AND ALGEBRAIC COMPU- 
TATION Linz/Hagenberg, Australia, Contact: 
Juan R. Sendra, Phone: 341-885-4902, Email: 
rafael.sendra@uah.es 


September |-3 
8TH INTERNATIONAL CONFERENCE ON 
INTELLIGENT VIRTUAL AGENTS Tokyo, 
Japan, Contact: Helmut Prendinger Email: 
helmut @nii.ac.jp 
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September 2-5 
10TH INTERNATIONAL CONFERENCE ON 
HUMAN COMPUTER INTERACTION WITH 
MoBiLE DEVICES AND SERVICES, Contact: 
Henri Hofte, Phone: 31-575-516319, Email: 
henri.terhoft @telin.nl 


September 16-19 
ECCE08: EUROPEAN CONFERENCE ON 
COGNITIVE ERGONOMICS Madeira, Portu- 
gal, Contact: Joaquim A. Jorge, Phone: 351- 
21-3100363, Email: jaj@inesc.pt 


September 20-23 
THE I|OTH INTERNATIONAL CONFER- 
ENCE ON UBiQquitous COMPUTING 
Seoul, South Korea, Contact: Joseph Mc- 
Carthy, Phone: 650-804-6987, Email: joe@ 
interrelativity.com 


September 22-23 
MULTIMEDIA AND SECURITY WORKSHOP 
Oxford, United Kingdom, Sponsored: 
SIGMM, Contact: Andrew David Ker, Phone: 
+44 1865 276602, Email: adk@comblab. 
ox.ac.uk 


September 28- October 2 
ACM/IEEE JITH = INTERNATIONAL 
CONFERENCE ON MODEL DRIVEN ENGI- 
NEERING LANGUAGES AND SYSTEMS 
(FORMERLY UML) Toulouse, France, Spon- 
sored: SIGSOFT, Contact: Jean-Michel Bruel, 
Phone: +33 686 002 902, Email: bruel@ 
univ-pau.fr 


October 9-10 
ACM-IEEE INTERNATIONAL SYMPOSIUM 
ON EmpiRICAL SOFTWARE ENGINEERING 
AND MEASUREMENT Kaiserslautern, Ger- 
many, Sponsored: SIGSOFT, Contact: Dieter 
Rombach, Phone: +49-631-205-2895, Email: 
rombach@informatik.uni-kl.de 


November 14-15 
ComPUTER HUMAN INTERACTION FOR 
THE MANAGEMENT OF INFORMATION 
TECHNOLOGY San Diego, CA, Contact: Eser 
Phone: 650-694-7974, 
kandogan@cs.umd.edu 


Kandogan, Email: 


December 9-12 
4TH CONFERENCE ON EMERGING NET- 
workK EXPERIMENT AND TECHNOLOGY 
Madrid, Spain, Sponsored: SIGCOMM, Con- 
Arturo Azcorra, +34-91- 
6248778, Email: azcorra@it.uc3m.es 


tact: Phone: 


December 10-13 
SIGGRAPH ASIA Singapore, Sponsored: SIG- 
GRAPH, Contact: Dr. YT Lee, 
mvtlee@ntu.edu.sg 


Email: 


orld Class Journals 


rvache Prewomene Based 


‘Assocation for 
Computing Machinery 


Aden Computing 019 Scence 8 Press 


CM Transactions on 
utonomous and Adaptive 
ystems 
ttp://taas.acm.org/ 


AAS addresses foundational, engineer- 

ng, and technological aspects of 

omplex computing systems exhibiting 

utonomous and adaptive behavior; 

ncluding the understanding, develop- 
ent, and control of such systems. 
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ACM Transactions on 
The Web 
http://tweb.acm.org/ 


TWEB publishes research on web con- 
tent, applications, use, and related 
enabling technologies; such as browsers 
and web interfaces; electronic 
commerce; electronic publishing; etc. 


Order Codes: Print- 159 Online - 259 
ISSN: 1559-1131 
Pricing: $ 40 Professional 

§ 35 Student 

$140 Non-Member 

$ 16 Air Service 


ACM Transactions on 
Knowledge Discovery 
from Data 


ACM Transactions on 
Knowledge Discovery from Data 
http://tkdd.acm.org/ 


TKDD publishes papers on a research in 
the knowledge discovery and analysis 


of diverse forms of data; such as 
scalable and effective algorithms for 
data mining and data warehousing, etc. 


Order Codes: Print- 170 Online - 270 
ISSN: 1556-4681 
Pricing: $ 50 Professional 
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$150 Non-Member 

$ 16 Air Service 
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Inside Risks | Xiaoming Lu and George Ledin, Jr. 


Wireless Sensor Networks and the Risks of Vigilance 


hen Wendell Phillips (an American 

abolitionist and reformer) told a 

Boston audience in 1852 that “Eternal 
vigilance is the price of liberty,” he did not antici- 
pate the advent of wireless sensor networks (WSNs). 
WSNs are a new technology that will help us be vigi- 
lant. Wireless networks and sensors are not new. How- 
ever, deploying very large numbers of very small 
sensing devices (7motes) is new. 

WSNs are distributed systems programmed for 
specific missions, to capture and relay specific data. 
For example, WSNs can check a vehicle’s registered 
identity, location, and movements. Data recorded by 
sensors embedded in the vehicle can be cross-corre- 
lated with data recorded by sensors embedded in side- 
walks and roads. With a vast WSN of this type 
available to them, authorities could monitor driving 
conditions and instantly recognize traffic problems. 
Drivers could benefit from such vigilance and the 
rapid response that it facilitates. 

The obvious downside in this example is a further 
erosion of our privacy. The cross-correlated data can be 
a bounty for law enforcement. If roads are seeded with 
sensors enforcing speed limits, we might expect to 
receive a ticket every time we exceed them. Authorities 
will benefit from such vigilance, too. There would be 
less need for patrolling highways or for pulling anyone 
over for speeding, because automatically generated 
fines could be issued to vehicle owners. 

Cars and roads are merely the tip of the iceberg 
for WSN applications. There are already commer- 
cially available sensor systems for habitat oversight, 
environmental surveys, building and structural 
integrity testing, spotting containers and other ship- 
ping cargo, border patrol support, fire and flooding 
alerts, and many other vigilance situations. Industry 
analysts predict the market for WSNs will surpass 
$7 billion by 2010. 

Potential uses and benefits of WSNs are difficult 
to gauge; so are the risks associated with their prolif- 
eration. Personal computers 30 years ago and cell 
phones 15 years ago can serve as templates for what 
we can reasonably expect. Today, motes are costly 
and big. Early PCs and mobile phones were heavy 
and expensive. Eventually sensors will be small 
enough to go unnoticed and inexpensive enough to 
be scattered almost anywhere. 
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Power, storage, and communication range will be 
challenges for WSNs, just as they are for laptop com- 
puters and mobile phones. Security is also a serious con- 
cern. Power drain in sensors spawned many clever, 
cost-effective workarounds, skirting security difficulties. 
Synchronizing sleep and wake cycles maximizes battery 
life, but exposes sensors to attacks that can force sensors 
to sleep (stop working) or stay awake (waste energy). 

Sensors are more vulnerable to attack than PCs or 
cell phones. A standard off-the-shelf serial board can 
be used to change data via sensors’ debugging inter- 
face. Data diddling could render a WSN unreliable. 
WSNs may give governments new tools to watch us, 
but hackers will relish new ways to spam and phish. 
Revenue-producing WSNs such as those monitoring 
traffic must be maintained, periodically tested, and 
upgraded. Maintaining WSNs deployed in rough ter- 
rains or hazardous conditions may not be possible. 
Motes may have to operate unattended, and those 
without power may remain unreplaced. Abandoned 
motes will be opportunities for new forms of data 
theft. Recovering dead motes to prevent staggering 
pollution problems will require “sensors sensing sen- 
sors’ —with as yet unknown techniques. 

Although power and security problems are not yet 
solved, it is prudent to begin examining the risks that 
would be posed by widespread deployment of WSNs. 
As with all advanced technologies, WSNs compel us 
to balance what's helpful (enhanced ability to observe) 
with what’s harmful (abuse of this ability or undue 
expectation of its reliability). Performance of large and 
complex WSNs may be affected by a few malfunc- 
tioning sensors, which might be difficult to discover. 

The risks of deployment must be compared with the 
risks of non-deployment. For some locations, the cost- 
benefit analysis may be simple and decisive. WSNs will 
appear wherever it makes economic sense to deploy 
them, or when political goals justify their deployment. 
Anti-terrorism efforts will add round-the-clock attention 
to our already well-documented lives. Phillips warned 
that if we want to be free, we had to be vigilant. He 
could not imagine we would risk trading freedom for vig- 
ilance; with WSNs, it can happen surreptitiously. @ 
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